Re: OpenBSD is just an OS, not a firewall...

[carlos albino garcia grijalba]

totally agree
> From: cei...@primealliancesolutions.com
> To: misc@openbsd.org
> Subject: Re: OpenBSD is just an OS, not a firewall...
> Date: Fri, 8 Jun 2012 19:48:45 +0000
>
> From the g+ spew:
>
>
>
> "I grew up and got a life!
>
>
>
> "You boys need a good beating with the clue stick:
>
> Hacking configuration files directly does not give you better security.
>
> Hacking configuration files directly does not make you better at security.
>
>
>
> "And the converse is true:
>
> Using a GUI to make firewall changes does not give you worse security
>
> Using a GUI to make firewall changes does not make you worse at security.
>
>
>
> "You still need to know what you are doing!
>
>
>
> "Any view contrary to this is borne of pure ignorance, prejudice and
incompetence."
>
>
>
>
>
> So, if there were some distro with a GUI front end for this "security
professional" with OpenBSD in the background, with some other name and
distributed as a bootable DVD -- call it DoucheWall -- OpenBSD would all of a
sudden become a "firewall"?
>
>
>
> -----Original Message-----
>
> From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of
Chris Smith
>
> Sent: Friday, June 08, 2012 12:56 PM
>
> To: OpenBSD-Misc
>
> Subject: OpenBSD is just an OS, not a firewall...
>
>
>
> ... if you really want a firewall you need pfSense.
>
>
>
> Also if you " walk into any security experts convention and claim that
>
> raw OpenBSD is "a firewall", you will get laughed out of the room for
>
> lack of clue."
>
>
>
> Guess I've been wrong all these years: see the comments to
>
> https://plus.google.com/u/0/104027218792812194992/posts/K3NsGE2UrCe