Reply
 
Thread Tools Display Modes
  #1  
Old 03-05-2006, 09:33 PM
tippekanu tippekanu is offline
Junior Member
 
Join Date: Mar 2006
Location: Vancouver Island, Canada
Posts: 14
Thanks: 0
Thanked 0 Times in 0 Posts
Default PF Firewall Setup
I appreciate the aims of the developers in putting together a "mainstream" BSD. So far, my experience so far is only with XPHome and limited time on Ubuntu 5.10 (very good install, btw. Hardware detection, package manager,etc. all excellent.)But what I really want is a good BSD! I have looked through the OpenBSD PF info, and searched the PC-BSD forums, but haven't found what I need so far on activation and setup of the firewall. My install is PC-BSD 1.0rc2 from purchased CD's. The PC-BSD firewall tutorial that most searches link to is: http://michael-and-mary.net/intro/?q=node/23
but this is for IPFW.
My setup is for 1 PC only, cable with DHCP, and a wired 4-port router/hardware firewall.
Until the official release comes out, can someone enlighten me on these questions?
1. Is there default firewall protection out of the box ala XP or Ubuntu?
In my install, it looks like all the firewall rules are commented out and
the firewall is not active.
2. What should my /etc/rc.conf file look like to activate my firewall?
3. I am not clear about defining the variables for ext_if and int_if.
My network settings in PC-BSD only show 1 network card.
If I only need to setup the external interface, can I use the default firewall rules as is?

4. How do I check to see what the firewall is doing? (ala Firestarter/Sygate)

Can anyone show me their firewall rule setup( etc/pf.conf) for 1 PC?
Apologies for all the noobish queries!!

I would really like to see a good GUI firewall setup and status app with
the final product.javascript:emoticon('')
Very Happy

Thanks in advance
Reply With Quote
  #2  
Old 03-05-2006, 09:50 PM
antik antik is offline
Senior Member
 
Join Date: Jul 2005
Location: Estonia
Posts: 3,610
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: PF Firewall Setup
Originally Posted by tippekanu
Thanks in advance
RTFM!
__________________
"All parts should go together without forcing. Therefore, if you can't get them together again, there must be a reason. By all means, do not use a hammer." -- IBM maintenance manual, 1975
Reply With Quote
  #3  
Old 03-06-2006, 12:15 AM
scottro scottro is offline
Senior Member
 
Join Date: May 2005
Location: NYC
Posts: 361
Thanks: 0
Thanked 0 Times in 0 Posts
Default
Estonia links to the handbook's page, which isn't a bad beginning, but, I'd say....

Start with my page

http://home.nyc.rr.com/computertaijutsu/pf.html

Hopefully, that gets you started. At the end of it are two links, one to Peter's pf page (he said nice things about mine) and the one that's considered more or less the main doc for it, the OpenBSD pf faq.

The man page is definitely heavy going for a newcomer, and makes more sense after you've looked at the three links mentioned above.

Also, the pfctl man page is important, but again, take a look at the three links given above, which should, hopefully, get you started.
Reply With Quote
  #4  
Old 03-06-2006, 05:41 AM
tippekanu tippekanu is offline
Junior Member
 
Join Date: Mar 2006
Location: Vancouver Island, Canada
Posts: 14
Thanks: 0
Thanked 0 Times in 0 Posts
Default PF Firewall Setup
Great links Scottro. Thank you!
Reply With Quote
  #5  
Old 03-06-2006, 12:37 PM
scottro scottro is offline
Senior Member
 
Join Date: May 2005
Location: NYC
Posts: 361
Thanks: 0
Thanked 0 Times in 0 Posts
Default
Glad you like it.
Reply With Quote
  #6  
Old 03-06-2006, 06:56 PM
antik antik is offline
Senior Member
 
Join Date: Jul 2005
Location: Estonia
Posts: 3,610
Thanks: 0
Thanked 0 Times in 0 Posts
Default
Originally Posted by scottro
Glad you like it.
NYC links to he's own page, which isn't a bad beginning, but, I'd say....

Start with original OpenBSD PF manual!!!
__________________
"All parts should go together without forcing. Therefore, if you can't get them together again, there must be a reason. By all means, do not use a hammer." -- IBM maintenance manual, 1975
Reply With Quote
  #7  
Old 03-06-2006, 07:39 PM
scottro scottro is offline
Senior Member
 
Join Date: May 2005
Location: NYC
Posts: 361
Thanks: 0
Thanked 0 Times in 0 Posts
Default
Antik, sorry for calling you estonia--I was clicking the back button on my browser while writing my post to see who had posted, and my eye caught estonia. Simply a mistake made while in a hurry.

As for the other part of your post,
I'm standing by saying start with my page.
It's an intro to the more complex pages, and covers some common newbie errors, such as setting up rules, then locking yourself out of your machine.

You will note that my page suggests the two well known pf pages.

Anyway, once again, apologies for calling you estonia, as I said, my eye caught the wrong part of your post.
Reply With Quote
  #8  
Old 03-06-2006, 09:02 PM
Charles Charles is offline
Senior Member
 
Join Date: May 2005
Posts: 3,710
Thanks: 0
Thanked 0 Times in 0 Posts
Default
I hope we have a PF GUI later this year :roll:
Reply With Quote
  #9  
Old 03-11-2006, 06:59 AM
tippekanu tippekanu is offline
Junior Member
 
Join Date: Mar 2006
Location: Vancouver Island, Canada
Posts: 14
Thanks: 0
Thanked 0 Times in 0 Posts
Default Helpful links
If anyone is looking for some more helpful links on PF, these ones may help:

https://solarflux.org/pf/

Cheers
Reply With Quote
  #10  
Old 03-11-2006, 09:52 AM
antik antik is offline
Senior Member
 
Join Date: Jul 2005
Location: Estonia
Posts: 3,610
Thanks: 0
Thanked 0 Times in 0 Posts
Default
Originally Posted by scottro
Antik, sorry for calling you estonia--
Anyway, once again, apologies for calling you estonia, as I said, my eye caught the wrong part of your post.
Noo, that's fine Calling someone estonia is not offence.
__________________
"All parts should go together without forcing. Therefore, if you can't get them together again, there must be a reason. By all means, do not use a hammer." -- IBM maintenance manual, 1975
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
BSD Firewall ?? damienjp General Questions 3 11-04-2006 06:53 PM
I am losing my mind setup firewall for web surfing only tommyjohn General Questions 4 08-15-2006 02:05 AM
pc-bsd have a firewall? General Questions 5 06-16-2006 08:49 PM
GUI firewall for PC-BSD antik Feature Requests 2 05-12-2006 07:06 AM
Firewall General Questions 5 09-27-2005 12:21 AM


All times are GMT. The time now is 02:04 AM.


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.

Copyright 2005-2010, The PC-BSD Project. PC-BSD and the PC-BSD logo are registered trademarks of iXsystems.
All other content is freely available for sharing under the terms of the Creative Commons Attribution License.