Subject: Re: Using ipfw
To: Mark Yovorsky <myov@vex.net>
From: Sean Davis <dive@endersgame.net>
List: tech-security
Date: 12/31/2001 20:45:41
ipfw is a FreeBSD filter tool, NetBSD uses ipf (IP Filter)

Some good documents to read are:
(this one goes over ipf briefly)
http://www.netbsd.org/Documentation/network/nsps/
(this one is very comprehensive)
http://www.obfuscation.org/ipf/ipf-howto.txt

On Mon, Dec 31, 2001 at 05:53:21PM -0500, Mark Yovorsky wrote:
> I'm not sure if this is the right place for this, but I didn't see 
> another list for firewalls.
> 
> 
> I'm in the process of moving my firewall from ipchains on a Linux 
> machine to ipfw on a NetBSD machine.
> 
> In my ipchains firewall, when I block a host completely, I add it to a 
> custom "banned" chain (which then DENY's the ip), rather than using a 
> DENY rule. I do this so that I can tell what was blocked - the specific 
> port or the entire ip.
> 
> Is there a way to do this in ipfw (create custom firewall targets)?
>