Edge OpenBSD PF Firewall. Securing the first gate of your network.

OpenBSD comes with a built-in firewall called PF, short for Packet Filter. PF is ideal for firewalling in your DMZ zone. This blog post will show you how to create a robust edge firewall setup with OpenBSD 6.5...

https://cryptsus.com/blog/edge-openbsd-pf-firewall-securing-the-first-gate-of-your-network.html

#pf #firewall #security

UTMFW.

UTMFW is a UTM firewall running on OpenBSD. UTMFW is expected to be used on production systems. The UTMFW project provides a Web User Interface (WUI) for monitoring and configuration.

https://github.com/sonertari/UTMFW

#firewall #security #network

OpenBSD: High-Availability Firewalling.

https://stuarthowlette.me.uk/posts/openbsd-firewall-ha/

#firewall #pf #carp

pf-badhost is a simple, easy to use badhost blocker that uses the power of the pf firewall to block many of the internet's biggest irritants.

https://www.geoghegan.ca/pfbadhost.html

#pf #firewall

High Availability Router/Firewall Using OpenBSD, CARP, pfsync, and ifstated

https://dzone.com/articles/high-availability-routerfirewall-using-openbsd-car

#firewall #router

How to build an amazing router and firewall with OpenBSD.

Part 1: Introduction.
Part 2: The network and DHCP.
Part 3: PF - The firewall.

#pf #firewall #network

Block abusive IP addresses with Pf-badhost in OpenBSD.

Pf-badhost is a very practical, robust, stable and lightweight security script for network servers. It prevents potentially-bad IP addresses that could possibly attack your servers (and waste your bandwidth and fill your logfiles), by blocking all those IPs contacting your server, and therefore it makes your server network/resources lighter and the logs of important services running on your server become simpler, more readable and efficient...

https://ozgur.kazancci.com/block-abusive-ip-addresses-with-pf-badhost-in-openbsd-a-must-have-security-tool/

https://www.geoghegan.ca/pfbadhost.html

#pf #firewall #feedback

Rolling Back OpenBSD PF Changes.

If you have ever done something dumb in a firewall config and locked yourself out of a machine, you will appreciate the ability to automatically roll a configuration back to a previous version after a timeout period. This is something that commercial routers and firewall devices from Cisco, Juniper, and others have implemented, though their solutions cover more than just the firewall itself.

https://kernelpanic.life/software/rolling-back-openbsd-pf-changes.html

#pf #firewall

pfstat on OpenBSD: analyze stream on IPv4 and IPv6 through PF.

pfstat is a project made by Daniel Hartmeir to generate graphic statistiques about the network stream through the firewall PF.

https://framagit.org/sh-web/hugo/doc.huc.fr.eu.org/raw/master/content/en/monitor/pfstat-openbsd.md

#network #firewall #pf

Blockor.

Protect BSD Unix computer servers from brute-force attacks. It works on top of the OpenBSD Packet Filter(PF) firewall.

https://github.com/muktadiur/blockor

#security #firewall #pf

PFRE.

PFRE is a packet filter rule editor for OpenBSD/pf. PFRE is expected to be used by beginners and system administrators alike. The UTMFW and PFFW projects use PFRE on their web administration interfaces. If you don't want to install PFRE yourself, you can download the installation files of UTMFW or PFFW to test drive PFRE easily...

https://github.com/sonertari/PFRE

#pf #firewall #network

A Few of My Favorite Things About The OpenBSD Packet Filter Tools.

The OpenBSD packet filter PF was introduced a little more than 20 years ago as part of OpenBSD 3.0. We'll take a short tour of PF features and tools that I have enjoyed using...

https://bsdly.blogspot.com/2022/09/a-few-of-my-favorite-things-about.html

#firewall #network #pf

A few of my favourite things about the OpenBSD Packet Filter tools.

The OpenBSD packet filter (PF) was introduced a little more than 20 years ago as part of OpenBSD 3.0. In a series of two posts, I invite you to take a short tour of PF features and tools that I have enjoyed using. At the time the OpenBSD project introduced its new packet filter subsystem in 2001, I was nowhere near the essentially full-time OpenBSD user I would soon become. I did, however, quickly recognize that even what was later dubbed ’the working prototype’ was reported to perform better in most contexts than the code it replaced.

https://blog.apnic.net/2022/11/02/openbsd-packet-filter-tools/

#pf #firewall

A Few of My Favorite Things About The OpenBSD Packet Filter Tools.

The OpenBSD packet filter PF was introduced a little more than 20 years ago as part of OpenBSD 3.0. We’ll take a short tour of PF features and tools that I have enjoyed using...

https://medium.com/@peter.hansteen/a-few-of-my-favorite-things-about-the-openbsd-packet-filter-tools-28b7ec4666a

#pf #firewall