Depends upon the needs. I've used IPchains, in addition to a few other
toys tosssed in as an additional main choker.
Thanks,
Ron DuFresne
On Fri, 14 Apr 2000, Ronneil Camara wrote:
> Is a good linux IPCHAINS rulesets, combined with setting correct permissions
> on files and patching up linux enough to protect a network from the outside
> ?
>
> > -----Original Message-----
> > From: Ron DuFresne [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, April 14, 2000 10:04 AM
> > To: Paul D. Robertson
> > Cc: Steve George; [EMAIL PROTECTED]
> > Subject: Re: Free stateful packet filtering
> >
> >
> > On Thu, 13 Apr 2000, Paul D. Robertson wrote:
> >
> > > On Thu, 13 Apr 2000, Ron DuFresne wrote:
> > >
> > > > Paul, last I read IPfilter runs fine on linux, if I
> > recall all the way
> > > > back to the 1.X.X kernels, though I might be wrong going
> > back that far,
> > > > certainly to the 2.0.X kernels.
> > >
> > > It runs only on the 2.0.x kernels (I think 2.0.36 is the last one it
> > > supported.) I'm not sure if the new code compiles there or
> > not though,
> > > and since it's not a fully supported platform I thought it
> > wasn't worth
> > > the multi-line "If you don't mind running old kernels on an
> > OS the package
> > > developer seems to not be focused on..." disclaimer.
> >
> > There are reasons some folks have stuck with the older
> > kernels, at least
> > there were unitl I've recent;y heard, some SSL and VPN
> > packages have been
> > finally ported to the 'newer' 2.2.X kernels.
> >
> > Thanks,
> >
> > Ron DuFresne
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > "Cutting the space budget really restores my faith in humanity. It
> > eliminates dreams, goals, and ideals and lets us get straight to the
> > business of hate, debauchery, and self-annihilation." -- Johnny Hart
> > ***testing, only testing, and damn good at it too!***
> >
> > OK, so you're a Ph.D. Just don't touch anything.
> >
> > -
> > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
> >
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
***testing, only testing, and damn good at it too!***
OK, so you're a Ph.D. Just don't touch anything.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
