OpenBSD hardening


Firewall - PF - Esempio (1/2):

        [ COMP1 ]    [ COMP3 ]
             |                 |                               ADSL
         ---+------+-----+------- fxp0 [ OpenBSD ] ep0 -------- ( Internet )
                      |
                  [ COMP2 ]

               # macros
               int_if = "fxp0"
               ext_if = "ep0"

               tcp_services = "{ 22, 113 }"
               icmp_types = "echoreq"

               priv_nets = "{ 127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }"
  
               comp3 = "192.168.0.3"

               # options
               set block-policy return
               set loginterface $ext_if