PF and application level firewall

2008-03-11 Thread Rami Sik
Hi All, I currently have PF in place with CARP, and quite happy with them. I need to implement application level firewalling in front of my apache servers as PCI requirement by the end of June this year. So, my question is, do we have any application level firewalling support on openBSD? Or,

Re: PF and application level firewall

2008-03-11 Thread Lord Sporkton
I believe squid is what you are looking for On 11/03/2008, Rami Sik [EMAIL PROTECTED] wrote: Hi All, I currently have PF in place with CARP, and quite happy with them. I need to implement application level firewalling in front of my apache servers as PCI requirement by the end of June

Re: PF and application level firewall

2008-03-11 Thread Shane Harbour
Rami Sik wrote: Hi All, I currently have PF in place with CARP, and quite happy with them. I need to implement application level firewalling in front of my apache servers as PCI requirement by the end of June this year. So, my question is, do we have any application level firewalling

Re: PF and application level firewall

2008-03-11 Thread Steven Surdock
Rami Sik wrote: I currently have PF in place with CARP, and quite happy with them. I need to implement application level firewalling in front of my apache servers as PCI requirement by the end of June this year. So, my ... I've used pound (http://www.apsis.ch/pound/) successfully. -Steve S.

Re: PF and application level firewall

2008-03-11 Thread Brian A. Seklecki
On Tue, 2008-03-11 at 09:51 -0700, Rami Sik wrote: Hi All, You can transparently re-write any application (TCP port) to a localhost security proxy and/or other system using pf(4)' RDR. ~BAS I currently have PF in place with CARP, and quite happy with them. I need to implement

Re: PF and application level firewall

2008-03-11 Thread Stuart Henderson
On 2008-03-11, Rami Sik [EMAIL PROTECTED] wrote: So, my question is, do we have any application level firewalling support on openBSD? hoststated/relayd, for some definitions of application level firewalling.