Page 1 of 1
[Solved] Firewall
Posted: Mon Sep 12, 2016 11:27 am
by christophe60_fr
Hello,
How to enable - and disable - the firewall ?
(GhostBSD 10.3 XFCE 64-bit).
Thanks.
Re: Firewall
Posted: Mon Sep 12, 2016 7:28 pm
by ASX
GhostBSD doesn't ship with a firewall, (you can choose among several available in FreeBSD),
pf is one commonly used in FreeBSD
place in /etc/rc.conf:
and customize your filters as fit your needs, below an example from pf.conf man page, that basically allow any traffic going outside and only traffic on port 25 inward.
Code: Select all
ext_if = "kue0"
all_ifs = "{" $ext_if lo0 "}"
pass out on $ext_if from any to any
pass in on $ext_if proto tcp from any to any port 25
Hope that help, even if I'm not sure this is what you would have read.
Re: Firewall
Posted: Wed Sep 14, 2016 5:17 am
by christophe60_fr
Yes, that's exactly what I needed.
But in what file to put these rules ? Should I create a pf.conf ?
Re: Firewall
Posted: Wed Sep 14, 2016 5:58 am
by ASX
christophe60_fr wrote:Yes, that's exactly what I needed.
But in what file to put these rules ? Should I create a pf.conf ?
Yes, /etc/pf.conf, sorry, seems I forgot to mention that.
Re: Firewall
Posted: Sun Nov 03, 2019 2:01 pm
by moonraven
ASX wrote: ↑Mon Sep 12, 2016 7:28 pm
GhostBSD doesn't ship with a firewall, (you can choose among several available in FreeBSD),
pf is one commonly used in FreeBSD
place in /etc/rc.conf:
and customize your filters as fit your needs, below an example from pf.conf man page, that basically allow any traffic going outside and only traffic on port 25 inward.
Code: Select all
ext_if = "kue0"
all_ifs = "{" $ext_if lo0 "}"
pass out on $ext_if from any to any
pass in on $ext_if proto tcp from any to any port 25
Hope that help, even if I'm not sure this is what you would have read.
My /etc/pf.conf file was empty so i just added those rules to the empty /etc/pf.conf file and save it. Was it right or is it another way to add the rules?
Re: [Solved] Firewall
Posted: Tue Jan 28, 2020 6:21 pm
by Leveret
I don't see firewall rules loaded message on screen when booting up. I did place the firewall_enable="YES" in /etc/rc.conf. I ask because this shows up on FreeBSD. Is there a way to test and make sure the firewall is active?