>>>>> "B" == Bret  <[EMAIL PROTECTED]> writes:

B> You can do this with linux, however its firewall ability is
B> somewhat limited.. Depending on the specific needs it may work.. I
B> havent worked at all with ipchains which is suppsoed to be a total
B> rewrite of the firewalling code, and supposed to be more powerful,
B> but then if we deal with 'supposed to be' things, the world is
B> supposed to be a safe place :)

It is easy to prove that ipchains is more powerful than the old ipfw
code. ipchains contains a wrapper script that translates arbitrary
ipfw commands to ipchains -- therefore ipchains is at least as
powerful as ipfw.

To show that it is more powerful, you just have to find one command in 
ipchains that cannot be expressed in ipfw. I will leave that as an
exercise for the reader.


Best regards,

Benny Amorsen

Netvision Denmark
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to