PF and application level firewall

[Rami Sik]

Hi All,



I currently have PF in place with CARP, and quite happy with them. I
need to implement application level firewalling in front of my apache
servers as PCI requirement by the end of June this year.  So, my
question is, do we have any application level firewalling support on
openBSD? Or, which third part tool/application would you suggest for
that purpose?



Thanks,





Rami

Re: PF and application level firewall

[Lord Sporkton]

I believe squid is what you are looking for



On 11/03/2008, Rami Sik <[EMAIL PROTECTED]> wrote:
> Hi All,
>
>
>
>  I currently have PF in place with CARP, and quite happy with them. I
>  need to implement application level firewalling in front of my apache
>  servers as PCI requirement by the end of June this year.  So, my
>  question is, do we have any application level firewalling support on
>  openBSD? Or, which third part tool/application would you suggest for
>  that purpose?
>
>
>
>  Thanks,
>
>
>
>
>
>
>  Rami
>
>


-- 
-Lawrence
-Student ID 1028219

Re: PF and application level firewall

[Shane Harbour]

Rami Sik wrote:
> Hi All,
>
>
>
> I currently have PF in place with CARP, and quite happy with them. I
> need to implement application level firewalling in front of my apache
> servers as PCI requirement by the end of June this year.  So, my
> question is, do we have any application level firewalling support on
> openBSD? Or, which third part tool/application would you suggest for
> that purpose?
>
>
>
> Thanks,
>
>
>
>
>
> Rami
>
>   
Take a look at mod_security (http://www.modsecurity.org).  There is a
port of it.

Regards,
Shane

Re: PF and application level firewall

[Steven Surdock]

Rami Sik wrote:
> I currently have PF in place with CARP, and quite happy with them. I
> need to implement application level firewalling in front of my apache
> servers as PCI requirement by the end of June this year.  So, my
...

I've used pound (http://www.apsis.ch/pound/) successfully.

-Steve S.

Re: PF and application level firewall

[Brian A. Seklecki]

On Tue, 2008-03-11 at 09:51 -0700, Rami Sik wrote:
> Hi All,
> 
> 
> 

You can transparently re-write any application (TCP port) to a localhost
security proxy and/or other system using pf(4)' RDR.

~BAS

> I currently have PF in place with CARP, and quite happy with them. I
> need to implement application level firewalling in front of my apache
> servers as PCI requirement by the end of June this year.  So, my
> question is, do we have any application level firewalling support on
> openBSD? Or, which third part tool/application would you suggest for
> that purpose?
> 
> 
> 
> Thanks,
> 
> 
> 
> 
> 
> Rami
> 
-- 
Brian A. Seklecki <[EMAIL PROTECTED]>
Collaborative Fusion, Inc.




IMPORTANT: This message contains confidential information and is intended only 
for the individual named. If the reader of this message is not an intended 
recipient (or the individual responsible for the delivery of this message to an 
intended recipient), please be advised that any re-use, dissemination, 
distribution or copying of this message is prohibited. Please notify the sender 
immediately by e-mail if you have received this e-mail by mistake and delete 
this e-mail from your system.

Re: PF and application level firewall

[Stuart Henderson]

On 2008-03-11, Rami Sik <[EMAIL PROTECTED]> wrote:
>   So, my
> question is, do we have any application level firewalling support on
> openBSD?

hoststated/relayd, for some definitions of "application level firewalling".