[Solved] Firewall

[christophe60_fr]

Hello,

How to enable - and disable - the firewall ?
(GhostBSD 10.3 XFCE 64-bit).

Thanks.

[ASX]

GhostBSD doesn't ship with a firewall, (you can choose among several available in FreeBSD),
pf is one commonly used in FreeBSD

place in /etc/rc.conf:

Code: Select all

pf_enable="YES"

and customize your filters as fit your needs, below an example from pf.conf man page, that basically allow any traffic going outside and only traffic on port 25 inward.

Code: Select all

           ext_if = "kue0"
           all_ifs = "{" $ext_if lo0 "}"
           pass out on $ext_if from any to any
           pass in  on $ext_if proto tcp from any to any port 25

Hope that help, even if I'm not sure this is what you would have read.

[christophe60_fr]

Yes, that's exactly what I needed.
But in what file to put these rules ? Should I create a pf.conf ?

[ASX]

Yes, that's exactly what I needed.
But in what file to put these rules ? Should I create a pf.conf ?

Yes, /etc/pf.conf, sorry, seems I forgot to mention that.

[moonraven]

GhostBSD doesn't ship with a firewall, (you can choose among several available in FreeBSD),
pf is one commonly used in FreeBSD

place in /etc/rc.conf:

Code: Select all

pf_enable="YES"

and customize your filters as fit your needs, below an example from pf.conf man page, that basically allow any traffic going outside and only traffic on port 25 inward.

Code: Select all

           ext_if = "kue0"
           all_ifs = "{" $ext_if lo0 "}"
           pass out on $ext_if from any to any
           pass in  on $ext_if proto tcp from any to any port 25

Hope that help, even if I'm not sure this is what you would have read.

My /etc/pf.conf file was empty so i just added those rules to the empty /etc/pf.conf file and save it. Was it right or is it another way to add the rules?

[Leveret]

I don't see firewall rules loaded message on screen when booting up. I did place the firewall_enable="YES" in /etc/rc.conf. I ask because this shows up on FreeBSD. Is there a way to test and make sure the firewall is active?