OpenBSD hardening


Firewall - PF (5/6)   Esempi:

antispoof
antispoof for {lo0, wi0} inet


load balancing
rdr on $ext_if proto tcp from any to www port www -> { www1, www2, www3 }


bandwidth management
altq on $intf cbq(ecn) queue {http}
               queue http bandwidth 50%
               pass out proto tcp from any to any port www queue http