Re: bridge firewall (was: Re: subnets, not routing etc.)

[Jason Wright <jason@thought.net>]

On Thu, Nov 16, 2000 at 03:29:24PM +0100, Philipp Schott wrote:
> i love the idea of a bridge firewall and i'd like to build one for one
> of our student's pools.
> is there anybody out there using such a thing? any caveats? pros & cons?
> 
Most of the caveats are documented in bridge(4) and brconfig(8).  You
need to be careful with the ipf rules (noting that only the 'in' rules
are processed), and careful which nics you use (no tl(4)'s allowed).  The
IPF howto is very useful for explaining some of the good features of ipf
and the openbsd bridge stuff (http://www.obfuscation.org/ipf/).

The pro is that you get a nice transparent firewall. =)

--Jason Wright