I disagree, spirit.
OpenBSD makes a fine network router, and an excellent firewall.
However, setting up a firewall properly requires detailed knowledge of the network applications in use, a clear understanding of TCP/IP, and competency with PF.
I have seen countless noobs stumble with PF configurations, due to lack of knowledge of PF, lack of knowledge of their network application requirements, lack of understanding of TCP/IP. For proof, I refer you to the long history of PF problems and questions posted in the "OpenBSD Security" subforum at bsdforums.org, on the misc@ mailing list, on Usenet, on IRC, and on the PF mailing list.
|