Re: OpenBSD Router/Firewall Question

["Young, Julian" <Julian.Young@nl.compuware.com>]

Could i sugest the you attemt to try and fix the problem at hand rather that
move it.  

Having a dual homed host as you web server is not a recomended topology as
web servers are easly and often comprmised which in this case would mean you
gateway would be comprmised as well.

in short it weakens your firewall by reducing your depth.

however the ipf HOW to at http://www.obfuscation.org/ipf/ should provide you
with most of the stuff you need in combination with the openBDS FAQ at
http://www.openbsd.org/faq/index.html
lost of got stuff in that one

you can also get some hints looking in the netbsd docs at www.netbsd.org

best of luck




"J"

-- 
Julian Young (Julian.young@nl.compuware.com) 
Software Engineer  - Compuware Europe B.V.
Hoogooddreef 5. PO Box 12933 1100 AX  Amsterdam The Netherlands
Tel +31 (020) 3116302 Mobile +31 (06) 288
43652_______________________________________________________________
NetBSD - because Unix isn't just #include <linux.h>, i386, ELF, ...!
   -- Hubert Feyrer 



-----Original Message-----
From: Dubbs [mailto:DUBBS-lists@cfl.rr.com]
Sent: Monday, July 01, 2002 4:53 AM
To: misc@openbsd.org
Subject: OpenBSD Router/Firewall Question


I'm having some problem operating OpenBSD as a web server behind a
Gateway/Router so I was thinking of moving the OpenBSD box and using it as
my
Gateway/Router in addition to using it as a web server...what do I need to
setup to make this work and are there any docs out there that can give me
helpful info....

-Dubbs


-- 
The contents of this e-mail are intended for the named addressee only. It
contains information that may be confidential. Unless you are the named
addressee or an authorized designee, you may not copy or use it, or disclose
it to anyone else. If you received it in error please notify us immediately
and then destroy it.