Re: NetBSD + npf for main Internet-facing firewall?

[nia <nia%NetBSD.org@localhost>]

On Thu, Feb 25, 2021 at 05:03:24PM +0000, U'll Be King Of The Stars wrote:
> Hi all,
> 
> I'm considering running NetBSD on Supermicro A1SRi-2758F server for my
> Internet-facing firewall and main switch.  I love this server for home
> servers because it's so quiet, and has many other suitable attributes.
> 
> My plan is to run npf as the main firewall, and to use this machine as
> the primary switch.
> 
> The funny thing is that I've noticed that not many NetBSD users openly
> discuss using npf for this purpose.  This would seem a natural use case
> to me.  (I should remember to follow my own rules and never make
> assumptions.)
> 
> It seems like a natural thing for fellow users to do.  But are my
> assumptions a bit off?
> 
> Kind regards,
> 
> Andrew

I've used NetBSD & npf for this purpose in the past (on PC Engines
APU hardware). There's also an example,
/usr/share/examples/npf/soho_gw-npf.conf