From owner-freebsd-pf@FreeBSD.ORG Sat Apr 29 19:36:52 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 425D516A400 for ; Sat, 29 Apr 2006 19:36:52 +0000 (UTC) (envelope-from wash@wananchi.com) Received: from ns2.wananchi.com (ns2.wananchi.com [62.8.64.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id 528B043D48 for ; Sat, 29 Apr 2006 19:36:51 +0000 (GMT) (envelope-from wash@wananchi.com) Received: from wash by ns2.wananchi.com with local (Exim 4.61 #1 (FreeBSD 4.11-STABLE)) id 1FZvFH-0000P1-Ji by authid ; Sat, 29 Apr 2006 22:36:47 +0300 Date: Sat, 29 Apr 2006 22:36:47 +0300 From: Odhiambo Washington To: steve lasiter Message-ID: <20060429193647.GC91947@ns2.wananchi.com> Mail-Followup-To: Odhiambo Washington , steve lasiter , freebsd-pf@freebsd.org References: <20060429145835.72906.qmail@web38910.mail.mud.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: <20060429145835.72906.qmail@web38910.mail.mud.yahoo.com> X-Disclaimer: Any views expressed in this message, where not explicitly attributed otherwise, are mine alone!. X-Mailer: Mutt 1.5.11 (2005-09-15) X-Designation: Systems Administrator, Wananchi Online Ltd. X-Location: Nairobi, KE, East Africa. User-Agent: Mutt/1.5.11 Cc: freebsd-pf@freebsd.org Subject: Re: first question X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 29 Apr 2006 19:36:52 -0000 * On 29/04/06 07:58 -0700, steve lasiter wrote: | I've used ipfilter and now have just loaded FreeBSD | 6.1 with PF to configure for a gateway/firewall/router | w/3 NICS for a new network the office. My topologoy: | =20 | INTERNET | | | | | --------|---------=20 | 66.190.186.13 | (EXT_NIC) | =20 | GATEWAY/FIREWALL | =20 | 10.0.0.0/24 ---switch----DMZ webserver | (DMZ_NIC) | =20 | 192.168.0.0/24 | (INT_NIC) | --------|---------- | | | | | SBS 2003 box w/ISA | | | switch | | | LAN |=20 | Questions: | 1)I need to allow access on ports 25, 80 and 443 to | the Small Business Server 2003 box for remote access | but I want all non-office related traffic on ports 80 | and 443 to go to the dmz webserver. Can you give some | insight on how I might route this using PF? |=20 | 2)Can someone provide a good base set of rules that | they have established for a similar topology? |=20 | This should get me started. Thanks for all the input. Please get started using the FAQ at the following link: http://www.openbsd.org/faq/pf At the end of the reading, you will see this example: http://www.openbsd.org/faq/pf/example1.html =46rom there, after thorough reading, you will be able to craft rules that= =20 will handle connections to your DMZ.... Sorry, if I did not turn out to be as helpful as you might have=20 expected. -Wash http://www.netmeister.org/news/learn2quote.html DISCLAIMER: See http://www.wananchi.com/bms/terms.php -- +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+ |\ _,,,---,,_ | Odhiambo Washington Zzz /,`.-'`' -. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+ =46rom a Tru64 patch description: Fixes a bug that causes a panic due to software error