GhostBSD 26.1 - pf Firewall Deep Dive: From ipfw to Clean Default Deny Setup
Description:
MarkdownIn this deep dive, I show you exactly how to replace the default ipfw firewall on GhostBSD 26.1 with a clean, modern pf configuration.
We go step-by-step:
- Understanding the default ipfw workstation profile
- Building a proper default-deny pf.conf
- Proper syntax checking with pfctl -n
- Cleanly disabling ipfw and enabling pf
- Final verification and best practices
This is the foundation for everything that comes next: Jails, bhyve, and hardening.
Here is a link to The Book of pf i get a small commission if you buy it, but it will not change the price for you. https://amzn.to/4uNNqG0
Contents
00:00 - Intro
00:19 - What this video covers
01:16 - First Steps
01:53 - Set ZFS environment snapshot
03:27 - Check if IPFW is running
04:06 - Ruleset explaination
07:16 - Load pf Module
08:08 - syntax check /etc/pf.conf
10:47 - Configure pf to run
12:21 - Verification Steps
13:38 - Wrapup
15:00 - Nridge vs Private IP
15:23 - pflog is a pcap