Handbook PF

[Peter N. M. Hansteen]

ben wilber <ben at desync.com> writes:

> What do people think of having a little more of our own PF
> documentation in the Handbook?  It's quickly becoming a popular
> firewall package and the Handbook doesn't really do it justice.

I've offered up a patch[1] to the firewalls chapter with a light
introduction and a reference to the BSD licensed tutorial[2] I maintain
separately.

> Maybe some real-world scenarios and commonly used solutions, like NAT
> for an office network or authpf for a secured server.

yes, there's something like that in there.  I'm kind of focused on
finishing [3] at the moment, but both [1] and [2] are BSD licensed
already and can be used as starting points if anybody else has the
resources to get more PF info, possibly FreeBSD-specific, into the
FreeBSD Handbook.

[1] http://www.bsdly.net/~peter/freebsd/fw.diff
[2] http://www.bsdly.net/~peter/pf.html or for that matter directly
    at http://home.nuug.no/~peter/pf/ - the docbook sgml source is
    there too 
[3] http://nostarch.com/pf.htm

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.