Subject: Re: Using ipfw
To: Mark Yovorsky <myov@vex.net>
From: Sean Davis <dive@endersgame.net>
List: tech-security
Date: 12/31/2001 20:45:41
ipfw is a FreeBSD filter tool, NetBSD uses ipf (IP Filter)
Some good documents to read are:
(this one goes over ipf briefly)
http://www.netbsd.org/Documentation/network/nsps/
(this one is very comprehensive)
http://www.obfuscation.org/ipf/ipf-howto.txt
On Mon, Dec 31, 2001 at 05:53:21PM -0500, Mark Yovorsky wrote:
> I'm not sure if this is the right place for this, but I didn't see
> another list for firewalls.
>
>
> I'm in the process of moving my firewall from ipchains on a Linux
> machine to ipfw on a NetBSD machine.
>
> In my ipchains firewall, when I block a host completely, I add it to a
> custom "banned" chain (which then DENY's the ip), rather than using a
> DENY rule. I do this so that I can tell what was blocked - the specific
> port or the entire ip.
>
> Is there a way to do this in ipfw (create custom firewall targets)?
>