- Posts: 123
- Thank you received: 0
Probably yet another IPtables question
- cybersorcerer
- Topic Author
- Offline
- Senior Member
Less
More
20 years 1 month ago #5308
by cybersorcerer
"He who breaks something to find out what it is, has left the path of wisdom."
Gandalf the Grey
Probably yet another IPtables question was created by cybersorcerer
Hiya, I am running an openBSD box in between my router and the rest of my network. Would IPtables be the best implementation? (suggestions appreciated) If so, could someone point me to a general tutorial on the IPtables syntax. I know what I want as far as rules.. just pulling it off seamlessly is the problem. Thanx again in advance.
"He who breaks something to find out what it is, has left the path of wisdom."
Gandalf the Grey
20 years 1 month ago #5309
by nske
Replied by nske on topic Re: Probably yet another IPtables question
You can not use iptables in OpenBSD as iptables are just an interface for netfliter, which is a linux kernel "packet mangling" infrastructure just like pf is for openbsd. So if you use OpenBSD you practically have to stick with PF, which is also awesome!
Everything you need to get going with PF is in this howto:
- pf-howto
also a good reference is the man page (man pf.conf), as well as the official faq:
- official faq
Finally, there is a great howto for the previous version of PF, the IPF hich uses mostly the same syntax.
- ipf-howto
Everything you need to get going with PF is in this howto:
- pf-howto
also a good reference is the man page (man pf.conf), as well as the official faq:
- official faq
Finally, there is a great howto for the previous version of PF, the IPF hich uses mostly the same syntax.
- ipf-howto
- cybersorcerer
- Topic Author
- Offline
- Senior Member
Less
More
- Posts: 123
- Thank you received: 0
20 years 1 month ago #5310
by cybersorcerer
"He who breaks something to find out what it is, has left the path of wisdom."
Gandalf the Grey
Replied by cybersorcerer on topic Re: Probably yet another IPtables question
hey! thats why I couldnt find any source or installs for IPtables that were interoperable with bsd variants!! lol.. I must say I can't believe I thought I could use it. Well this helps out tons... the ruleset will be done soon.. Im taking quite a finicky approach closing as many holes as I can.. I might end up posting the source when Im done.. thanx again!
"He who breaks something to find out what it is, has left the path of wisdom."
Gandalf the Grey
20 years 1 month ago #5312
by nske
Replied by nske on topic Re: Probably yet another IPtables question
good luck with the implementation, let us know if you meet any difficulties
20 years 1 month ago #5315
by sahirh
Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
Replied by sahirh on topic Re: Probably yet another IPtables question
Post your rules, I havent looked over PF much..
Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
Time to create page: 0.126 seconds