rob897
November 11th, 2003, 08:28
Ok fellas I want to install a firewall to my machine, but am not sure what my best options are.
Here are somethings I want to accomplish:
[list:584103855c]Limit ssh to only my internal ip addresses
Allow on my internal ip addresses to access Proftp (for internal dev work)
Restrict access to my website also by IP but in groups
[/list:u:584103855c]
I am sure there are alot of ways to do this, but not really sure where I should start.

Thanks
bsdjunkie
November 11th, 2003, 10:37
Which OS Open/Free/Net. Also, what packet filter you plan on using?

pf, ipf, etc..
rob897
November 11th, 2003, 21:11
I am using FreeBSD and was thinking of using pf, since it seems like its the most widely used on this forum. But I am open to suggestions.
Loop
November 11th, 2003, 21:55
pf isn't part of the base install of FreeBSD, you'll have to install the security/pf port.

Follow the instructions at the home page (http://pf4freebsd.love2party.net/index.html) for setup info.

If you want to use something that is part of the OS, try IPFW. Follow the instructions in the Firewall (http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html) section of the Handbook.
Vile
November 29th, 2003, 01:54
Limit ssh to only my internal ip addresses
Allow on my internal ip addresses to access Proftp (for internal dev work)
Restrict access to my website also by IP but in groups

You can do all of these things very easily with pf.