PDA

View Full Version : [Solved] default firewall in FeeBSD


m4rtin
April 26th, 2010, 17:08
I just installed FreeBSD 8.0 + xorg + gnome + firefox. As much as I know, there is no firewall with Gnome(probably just frontends for iptables, pf etc). However, am I correct, that there are IPFW, PF and IPF installed with the base FreeBSD system by default? Which one of those is activated by default?

SirDice
April 26th, 2010, 17:09
I just installed FreeBSD 8.0 + xorg + gnome + firefox. As much as I know, there is no firewall with Gnome(probably just frontends for iptables, pf etc).
Gnome is a desktop environment and has nothing to do with networking.

However, am I correct, that there are IPFW, PF and IPF installed with the base FreeBSD system by default?
Yes, all three are part of the base FreeBSD OS.

Which one of those is activated by default?
None of them are activated by default.

lumiwa
April 27th, 2010, 12:20
I just installed FreeBSD 8.0 + xorg + gnome + firefox. As much as I know, there is no firewall with Gnome(probably just frontends for iptables, pf etc). However, am I correct, that there are IPFW, PF and IPF installed with the base FreeBSD system by default? Which one of those is activated by default?

For me was PF the easy way to setup.
You will find "howto" and examples too.

graudeejs
April 27th, 2010, 12:39
I used pf. right now I use ipfw. Both are nice

m4rtin
April 27th, 2010, 23:38
ok, I see. The reason why did I think that one of the firewalls is enabled by default was that I had some download issues with "pkg_add -rv packagename". It uses FTP and it seemed to me that FTP sessions did never start. However, it turned out, that this was the problem -> link (http://old.nabble.com/passive-ftp-transfer-with-pkg_add-td15129108.html). However, am I correct, that before enabling for example pf, I'm all open to the outside world?

graudeejs
April 27th, 2010, 23:48
ok, I see. The reason why did I think that one of the firewalls is enabled by default was that I had some download issues with "pkg_add -rv packagename". It uses FTP and it seemed to me that FTP sessions did never start. However, it turned out, that this was the problem -> link (http://old.nabble.com/passive-ftp-transfer-with-pkg_add-td15129108.html). However, am I correct, that before enabling for example pf, I'm all open to the outside world?

Not unless you have apps, that listen to some ports

SirDice
April 28th, 2010, 07:18
ok, I see. The reason why did I think that one of the firewalls is enabled by default was that I had some download issues with "pkg_add -rv packagename". It uses FTP and it seemed to me that FTP sessions did never start. However, it turned out, that this was the problem -> link (http://old.nabble.com/passive-ftp-transfer-with-pkg_add-td15129108.html). However, am I correct, that before enabling for example pf, I'm all open to the outside world?

You are behind a router, that's why you have to use passive FTP. This means your machine isn't directly accessible from the internet.