Re: Create a canned "Firewall Build" or RFHH

["Peter Masloch" <peter@easynix.com>]

I believe there is already a CD which you can use to start out with:
OpenBSD 3.0 IPF
I know, it is not a complete fw but a good start.
Peter



> > By making OpenBSD hard to learn-and-configure as a firewall,
> > we're causing businesses to run less securely than they would
> > if a truly easy-to-set-up OpenBSD firewall were available.
> 
> To quote Theo:
> 
> "You might be just a little bit surprised to hear that we -- the
> developers -- do OpenBSD FOR OURSELVES."
> 
> In other words,  not for businesses.
> 
> > included one CD that was OpenBSD-Firewall, or a setup script
> > option path on the current set, I suspect many more would be
> > willing to contribute to OpenBSD.
> 
> RFHH - Request for Hand Holding.
> 
> By their very nature firewalls should not be plug and play.  If you can't
> figure out what every line of your pf rules do, you shouldn't be setting
> up a firewall, period.  You'll invariably feel safe with something that
> probably isn't.