• History
• Transparent Firewall Demo
• Redundant Firewall Demo
• Questions

History

• 1995: OpenBSD born: fork from NetBSD

• 2000: I started using OpenBSD :~)

• pf was introduced in OpenBSD 3.0 [1 November 2001] as a BSD Licensed replacement for ipf

• In the following 13 years pf has matured and had lots of features added, including CARP [1 May 2004].

Transparent Firewalls

In this demo I'm using a PC Engines Alix 2D1

Transparent Firewalls

• Blue Ethernet cable connects eth0 {vr0} to internet
• Green Ethernet cable connects eth1 {vr1} to private management network
• Pink Ethernet cable connects eth2 {vr2} to our internal network
  • Zaurus in this case
• eth0 is bridged to eth2

Transparent Firewalls

Redundant Firewalls: The Schematic

Redundant Firewalls

• Components
  • CARP - Common Address Redundancy Protocol
    • address failover
  • pfsync
    • state synchronisation
• Demo

Questions?

Resources

http://www.openbsd.org/

http://www.openbsd.org/faq/index.html

The Book of PF:

A no-nonsense guide to the OpenBSD Firewalls by Peter N.M. Hansteen

http://www.nostarch.com/pf3

About Me

Some ramblings on the interwebs: http://www.schoolio.co.uk/

Follow me on twitter: https://twitter.com/fcbsd/