How many rules can IPF handle without noticeable performance loss?
A lot. There have been cases where there have been more than 45,000 rules without noticeable performance loss. The important thing when dealing wih large numbers of rules is to use groups. When properly written and organized you can have tons of rules. • How can I configure IPF so that laptops can connect to services on the firewall from the internal LAN and from the outside world using the external addresses, so they don’t have to be reconfigured all the time? The solution seems a bit counter-intuitive at first, but it’s actually quite simple. Setup a redirect on your internal interface, like this: rdr int-interface ext-address/32 port 110 -> int-address port 110 tcp rdr int-interface ext-address/32 port 25 -> int-address port 25 tcp Remember that this is only if the services are on the firewall. If the services are on machines behind the firewall see IV.8. • How do you use the IPSec Proxy? Unfortunately, I’ve never used it myself. At this point the best I can do is give you the synta
