Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 06 Feb 2010 07:04:55 +0800
From:      Aiza <aiza21@comclark.com>
To:        Iv Ray <pobox@verysmall.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: best firewall for a web server
Message-ID:  <4B6CA417.90904@comclark.com>
In-Reply-To: <B319E507-F26F-457E-937B-1408FB41132E@verysmall.org>
References:  <B319E507-F26F-457E-937B-1408FB41132E@verysmall.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Iv Ray wrote:
> We will be running a web server -
> 
> - FreeBSD 8.x
> - Apache 2.x
> - php 5.x
> - PostgreSQL 8.x
> - Postfix 2.x
> 
> - The server will run nearly 98% of the time below 25% load (no high performance firewall is needed).
> - Access to the server will be done only via ssh w/ key (there will be no public ftp, etc.).
> 
> I read several threads on FreeBSD Questions and checked the Handbook, and my conclusion is that PF seems the most straightforward for such "classic" situation.
> 
> Am I right?
> 
> Thanks,
> Iv_______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
> 
> 
I would use ipfilter. Its rules are the same as PF but its log is easier 
to read.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4B6CA417.90904>