On Thu, 18 Jul 2002 12:31:36 -0500 
Steve Bremer <[EMAIL PROTECTED]> wrote:

> I would recommend making one of the firewalls a *BSD variant so you
> can use IPF (or PF).  Not because I think they are more secure, but
> it's always good to "not use the same key for every door".  So for
> example, if someone where to find a security flaw in IPF, it wouldn't
> affect the Linux firewall (and vice versa).

I use the same reasoning for recommending that security devices (such as
firewalls) be run on atypical hardware: MIPS systems, Alpha, Not-Solaris
on SPARC, not-HP-UX on PA-RISC, etc.

-- 
J C Lawrence                
---------(*)                Satan, oscillate my metallic sonatas. 
[EMAIL PROTECTED]               He lived as a devil, eh?              
http://www.kanga.nu/~claw/  Evil is a name of a foeman, as I live.

Reply via email to