>>>>> "Teejay" == Teejay Teodoro <[EMAIL PROTECTED]> writes:
Teejay> Afaik you are just paying for the "automagic GUI
Teejay> configuration & plug-and-play(pray?)-ness" and
Teejay> etc. etc. that comes with hardware solution machines like
Teejay> netscreen, securezone, etc. etc. firewalls. And of course,
Teejay> stuff are already packaged in firewall appliances like the
Teejay> ones recently mention, like spam traps and so on. So it is
Teejay> already setup for you.
For businesses, its a convenience. One doesn't need to know the
implementation of a firewall appliance, only to know enough to turn on
and off the firewall when needed, and to call tech support
otherwise. You do get to shell out more cash, though I suspect that it
should fulfill `company requirements'.
Teejay> As for a ordinary machine, turned into a firewall. More...
Teejay> 'user-interaction' is needed... you gotta config the
Teejay> firewall rulesets yourself (there is already fw tools and
Teejay> scripts that would help you do this). In short... you are
Teejay> gonna spend some time in fine tuning your machine. =) But at
Teejay> least you'll save a couple of thousands of pesos.
For hackers, its security and fish (or peace) of mind. The seasoned
sysadmin who's insane enough to write rulesets blindfolded would
appreciate the level of control he/she has over a custom firewall. Whats
more, such appliances can also be configured to do other things (like
act as a honeypot faking a node), or for more sophisticated setups, even
only exist in software (like uml). Just be careful, or it'll be more a
conflagration spreading inward the network instead of a barrier outside.
Teejay> Just my two cents.
Same here. Just make sure folks out there find the right balance for
you. ;-)
--
ZAK B. ELEP <[EMAIL PROTECTED]> -- <http://zakame.spunge.org>
1024D/FA53851D 1486 7957 454D E529 E4F1 F75E 5787 B1FD FA53 851D
-- Running Debian GNU+Linux testing/unstable. GnuPG signed mail preferred.
pgp4Yb5DRYpCb.pgp
Description: PGP signature
-- Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
