[TriLUG] looking for linux solution similar to openbsd's authpf

[Dewey Hylton]

----- Original Message -----
> From: "Steve Litt" <slitt at troubleshooters.com>
> To: trilug at trilug.org
> Sent: Sunday, September 15, 2013 11:13:42 PM
> Subject: Re: [TriLUG] looking for linux solution similar to openbsd's authpf
> 
> On Sun, 15 Sep 2013 18:12:52 -0400 (EDT)
> Dewey Hylton <plug at hyltown.com> wrote:
> 
> > my google-fu is lacking, though all my searches to date have
> > included
> > the authpf keyword so i'm likely excluding all the right answers.
> > recommendations?
> > 
> > pretty much all my firewall expertise from the past 8-10 years
> > involves openbsd's pf, so i assume there's a lot to catch up on in
> > the iptables world ...
> 
> Hi Dewey,
> 
> I'm a Linux guy through and through, but to me, iptables is so
> inscrutable that my firewall/router/NATter is an OpenBSD machine
> running pf, dhcp server, and ssh server useful in pinholing from
> outside to my desktop.
> 
> I would never again go back to an iptables-based solution unless
> there
> were some reason I just couldn't run an OpenBSD/pf firewall.
> 
> Thanks,
> 
> SteveT

i think we're on the same page. problem here is that i now have a customer server out on the net without a dedicated firewall in front. it's running linux and i'm trying to figure out how to best secure it without having openbsd to save the day. :)