Building Firewalls.

2000-07-24 Thread benjamin.c
Hi all i am setting up a firewall on a private 2mb lan away from our main network. now there is a router that the 2 mb pipe feeds into, and that i want to do is place the firewall with the pc's that are on the 2mb Lan, bec we have not space left in the rack. would this effect me applying rules

how do you write firewall for windows

2000-07-24 Thread elvis
Hi people I have already posted a message on this forum with a similar query and Bernd had suggested something.But I still ran into dead ends Now i'm trying to use a layered service provider to achieve firewalling features. If anyone can give me s start as in how a firewall is written for the

Re: UDP: Are you still used???

2000-07-24 Thread J Weismann
so I take it UDP is still used even though it is not as secure as TCP. UDP is not as _reliable_ as TCP, but IMHO its no more difficult to secure unless you are talking static packet filters. With any other firewall technology, its no worse or better. Would removing the UDP settings

cisco Established keyword

2000-07-24 Thread Patrick Darden
Gernot, The "established" extended ACL keyword only checks for an ACK in packets. Letting packets just because the ACK is set is not good--a number of well known scans work because of this. "Established" is not stateful in any sense of the word. It was an early kludge that was followed by

Re: Re(2): Poor practice of using a router as a firewall

2000-07-24 Thread Chris Brenton
On Mon, 24 Jul 2000, Marlon Jabbur wrote: Try to think in an Web Attack, where a attacker explore a vulnerability in a Web Server and open a shell for execute commands. An application gateway firewall can stop this kind of attack and this is something a packet filter cannot do. "can" and

Re: UDP: Are you still used???

2000-07-24 Thread mouss
At 19:17 23/07/00 -0400, Chris Brenton wrote: J Weismann wrote: so I take it UDP is still used even though it is not as secure as TCP. UDP is not as _reliable_ as TCP, but IMHO its no more difficult to secure unless you are talking static packet filters. With any other firewall technology,

Re: UDP: Are you still used???

2000-07-24 Thread mouss
so what about the following kind of firewall: - for any packet received, send it to the local process that listens on the port, independently of the destination address - the local process is a proxy, that thing called ALG, and knows how to forward the packet if the packet is ok. ? This is far

Re: Linux Firewalls?

2000-07-24 Thread Fredy Santana
Jonathan: You also can see: http://www.opensourcefirewall.com/ There is a Linux firewall called "T-Rex" a application firewall Regards [EMAIL PROTECTED] writes: Afternoon ya'll. Looking for a program that can be established on linux as a firewall. I haven't seen too many outthere except

Re: UDP: Are you still used???

2000-07-24 Thread Ron DuFresne
Chris et. al., Perhaps the subject might shift towards a definition of the quality of the proxies that specific vendors ship. Which vendors actually ship more then a plug for application level proxies and how effective are specific vendors tools in dealing with content? Thanks, Ron DuFresne

Re: SMTP mail relay from DMZ

2000-07-24 Thread Basit Hussain
You need to use the mailertables located in /etc/mail for routing it. Look at http://www.sendmail.org/m4/mailertables.html for an example. - Original Message - From: Gerald Mattison [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 25, 2000 12:42 AM Subject: SMTP mail relay

Re: SMTP mail relay from DMZ

2000-07-24 Thread Basit Hussain
Mapping an address the way you mentioned will work of course but that is not something you would want to do. I am not familiar with the SonicWall product (sorry). I have a configuration similar to yours, except my internal mail server and firewall is also linux. The mailertables are all that is