<para>This document aims to cover the process that is required in

    <para>This document covers the process that is required to setup

      order to setup firewalling with FreeBSD when are dynamically 

      firewalling with FreeBSD when an IP address is assigned dynamically  

      assigned an IP address by your ISP.  While every effort has been

      by your ISP.  While every effort has been made to make this document

      made to make this document as informative and correct as possible,

      as informative and correct as possible, you are welcome to mail your

      you are welcome to mail your comments/suggestions to the

      comments/suggestions to the <email>marcs@draenor.org</email>.</para>

      <email>marcs@draenor.org</email>.</para>

    <para>The first thing you'll need to do is recompile your kernel in

    <para>The first thing you'll need to do is recompile your kernel.

      FreeBSD. If you need more information on how to recompile the kernel,

      If you need more information on how to recompile the kernel,

       configuration section in the Handbook</ulink>. You need to compile the

       configuration section in the Handbook</ulink>. You need to add the

      following options into the kernel: </para>

      following options into your kernel config: </para>

           stops your log files filling up with lots of repetitive entries.

           prevents your log file from filling up with lots of repetitive entries.

    <para>There are also some other OPTIONAL items that you can compile

    <para>There are some other OPTIONAL items that you can compile

    <para>Don't reboot once you have recompiled the kernel. Hopefully, we will

    <para>Don't reboot once you have recompiled the kernel. Hopefully, 

      need to reboot just once in order to complete the installing of the

      we will only need to reboot once to complete the installation of the

      firewall. Simply add the following lines:</para>

      firewall.  Simply add the following lines:</para>

    <para>For more information on what the above do take a look at

    <para>For more information on the functions of these statements take 

      <filename>/etc/defaults/rc.conf</filename> and read

     a look at <filename>/etc/defaults/rc.conf</filename> and read

      translation (NAT).  If that is the case you will have to disable it,

      translation (NAT).  If that is the case then you will have to disable 

      as these examples use &man.natd.8; to do the same.</para>

      it, as these examples use &man.natd.8; to do the same.</para>

      automatically start PPP it probably looks like this:</para>

      automatically start PPP, it probably looks like this:</para>

    <para>We're nearly done now. All that remains now is to define the

    <para>We're nearly done now.  All that remains now is to define the

      running. I realize that everyone will want something slightly different

      running.  I realize that everyone will want something slightly different

      when it comes to their rulebase. What I've tried to do is write a

      when it comes to their rulebase.  What I've tried to do is write a

      rulebase that suits most dialup users. You can obviously modify it to

      rulebase that suits most dialup users.  You can obviously modify it to

      your needs by  simply using the following rules as the foundation for

      your needs by using the following rules as the foundation for

      firewalling. What you want to do is deny everything by default and then

      firewalling.  What you want to do is deny everything by default and then

      only open up for the  things you really need. Rules should be in the

      only open up for the things you really need.  Rules should be in the

      order of allow first and  then deny. The premise is that you add the

      order of allow first and then deny.  The premise is that you add the

      rules for your allows, and  then everything else is denied. :)</para>

      rules for your allows, and then everything else is denied. :)</para>

      <filename>rc.conf</filename>. Please note that you can change this

      <filename>rc.conf</filename>.  Please note that you can change this

      filename to be anything you wish. This guide just gives an example of a

      filename to anything you wish.  This guide just gives an example of a

    <para>Now, let's look at a sample firewall file, and we'll detail

    <para>Now, let's look at a sample firewall file, that is commented nicely.  

      everything in it. </para>

      </para>