Re: DMZ

2001-05-14 Thread mouss
At 01:35 12/05/01 +, Hafida Fouta wrote: I am looking for a DMZ firewall. We will use it in NT network. I want to see the price of checkpoint fw. I really need to know it as soon as possible. Thank you very much for your reply Hafida Hafida, Given where you are, you have the choice between

Re: DMZ

2001-05-14 Thread mouss
Hafida, I am a moroccan myself. I can help you if you can tell me what is your budget and your preferences. If you want to choose an open source solution, the price may be almost zero (you'll still need to buy the hardware!). just tell me what you exactly need. mouss At 22:41 11/05/01

Re: Checkpoint to PIX conversion

2001-05-14 Thread mouss
At 02:22 13/05/01 -0500, Martin Hoz wrote: Miller, Ari ha escrito: Has anyone had the opportunity to convert a Checkpoint firewall to PIX? I was hoping to leverage other people's experience with this conversion -- this particular Checkpoint firewall has about 45 explicit rules, but

Re: Checkpoint to PIX conversion

2001-05-14 Thread Devdas Bhagat
On Mon, 14 May 2001, mouss spewed into the ether: why would you think linux+[iptable|ipchains] wouldn't be? and if you are lookin for a GUI with this, there are GUIs available to configure ipchains and iptables firewalls. Devdas Bhagat -- Bingo, gas station, hamburger with a side order of

Re: DMZ

2001-05-14 Thread Jeffery . Gieser
Hafida, Believe it or not but the best way to get a price quote on a firewall is to call a salesperson from the firewall company in question and ask them. This is NOT the firewall sales channel mailing list. This is a technical list and I see a lot of people asking pricing related

Re: DMZ

2001-05-14 Thread Jonas Luster
* mouss sez: : Checkpoint is a hard choice, since there has been rumours claiming they : work for the mossad. While there is no proof for that (I guess you didn't : think they are so dumb to prove anything suspicious), Checkpoint On a side note, what happened to all that suspicious traffic

Is This True!?!

2001-05-14 Thread Ronneil Camara
Is it true that NetBSD is better than openbsd and freebsd when it comes to security? I thought, it was openbsd. Coz I'm planning of setting up a new firewall. Thanks. Neil - [To unsubscribe, send mail to [EMAIL PROTECTED] with unsubscribe firewalls in the body of the message.]

PIX nat w2k netbios

2001-05-14 Thread bob bobing
Ok in other parts of the network i don't have any problem with doing file xfers via netbios (with nt4.0) over a PIX using NAT with a global (dynamic nat). But on this one pix (same code rev) I can only have one file xfer per src ip. So i nat everyone to 1 address and this is what i see. Host A

Re: Is This True!?!

2001-05-14 Thread Jose Nazario
On Mon, 14 May 2001, Ronneil Camara wrote: Is it true that NetBSD is better than openbsd and freebsd when it comes to security? I thought, it was openbsd. while neither netbsd nor freebsd are slouches when it comes to security (though freebsd seems to have more core and kernel security

Re: Is This True!?!

2001-05-14 Thread Kriss Andsten
On Mon, 14 May 2001, Ronneil Camara wrote: Is it true that NetBSD is better than openbsd and freebsd when it comes to security? I thought, it was openbsd. Coz I'm planning of setting up a new firewall. Yeah, the netbsd people upgraded the magic security powder module to version 2.5 in the

RE: DMZ

2001-05-14 Thread Marx, Jörg
Please go away with that stuff ;-) I can't hear it anymore... Instead take a 'grep' over an archive of this list. cu Jorg -- Jörg Marx secunet Security Networks AG Ammonstraße 72 E-Mail: [EMAIL PROTECTED] 01067 Dresden -Original

Re: Is This True!?!

2001-05-14 Thread mouss
At 11:36 14/05/01 -0400, Jose Nazario wrote: On Mon, 14 May 2001, Ronneil Camara wrote: Is it true that NetBSD is better than openbsd and freebsd when it comes to security? I thought, it was openbsd. while neither netbsd nor freebsd are slouches when it comes to security (though freebsd

Re: DMZ

2001-05-14 Thread mouss
At 08:04 14/05/01 -0700, Jonas Luster wrote: * mouss sez: : Checkpoint is a hard choice, since there has been rumours claiming they : work for the mossad. While there is no proof for that (I guess you didn't : think they are so dumb to prove anything suspicious), Checkpoint On a side note, what

Re: Checkpoint to PIX conversion

2001-05-14 Thread Martin Hoz
mouss ha escrito: At 02:22 13/05/01 -0500, Martin Hoz wrote: Miller, Ari ha escrito: Has anyone had the opportunity to convert a Checkpoint firewall to PIX? I was hoping to leverage other people's experience with this conversion -- this particular Checkpoint firewall has about 45

Re: Checkpoint to PIX conversion

2001-05-14 Thread Achim Dreyer
On Mon, 14 May 2001, Martin Hoz wrote: [..] why would you think openbsd+ipf wouldn't be? I never said that. But AFAIK; openbsd+ipf does not have a GUI: why would you think linux+[iptable|ipchains] wouldn't be? Ditto. Hy, I don't know why you are claiming that there are no GUIs

web site hacked

2001-05-14 Thread Ronneil Camara
I need some help. Our customer's web has been hacked. Do you know of any solution to secure ftp service on a win2000? I just don't know if there is an ftp over ssh on win2000? Is there such? Problem with this is, it's not possible to install a firewall now. The server is situated on the ISP. I

Re: Checkpoint to PIX conversion

2001-05-14 Thread Martin Hoz
Achim Dreyer ha escrito: On Mon, 14 May 2001, Martin Hoz wrote: [..] why would you think openbsd+ipf wouldn't be? I never said that. But AFAIK; openbsd+ipf does not have a GUI: why would you think linux+[iptable|ipchains] wouldn't be? Ditto. Hy, I don't know why you are

Re: web site hacked

2001-05-14 Thread Dennis Dai
Ronneil Camara wrote: I need some help. Our customer's web has been hacked. Do you know of any solution to secure ftp service on a win2000? I just don't know if there is an ftp over ssh on win2000? Is there such? sftp? cygwin (cygwin.com) ported openssh-2.5.2-p2 (iirc) to win32 which

Re: Checkpoint to PIX conversion

2001-05-14 Thread Alvin Oga
hi ya devdas the question is which gui .. or automated script... so many to pick from http://www.linux-sec.net/firewall.gwif.html - seems to also depend if you are config'ing 1, 2 or 3 nics have fun linuxing alvin On Mon, 14 May 2001, Devdas Bhagat wrote: On Mon, 14 May 2001,

PiX and Mail

2001-05-14 Thread Roy Rapoport
About a week ago, we migrated a big chunk of network from an outdated configuration where the mail system was protected by a 3620 with NAT and no port-blocking to a PiX 520 running 5.3. The IP address remained the same, of course, both internally and externally, and we (duh) opened port 25 for

Need some pointers/recommendations

2001-05-14 Thread ebrastow
Hi, I've been running Checkpoint FW-1 on a FreeBSD/Nokia box for a while here, and I while I like the product technically, I think I am finally at that point where I am fed up with the support/services/reseller infrastructure behind it and would like to look at other options. At the time that I

RE: PiX and Mail

2001-05-14 Thread Ben Nagy
Make sure you're rejecting (as in sending a RST) incoming ident (TCP 113) not silently discarding it? A very common scenario for outbound mail is that the server you're connecting to sends an ident query, and waits for a reply. Often, if the firewall silently discards the query (or even sends an

RE: Need some pointers/recommendations

2001-05-14 Thread Bill Royds
If you would accept an application gateway firewall, Raptor fits most of your criteria (even to point that its development headquarters in Massachusetts). Look at http://www.firetower.com for a company that supports Raptor and some Raptor listserver archives. They are in Massachusetts as well.

Re: web site hacked

2001-05-14 Thread Eric Johnson
From: Ronneil Camara [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject:web site hacked Date sent: Mon, 14 May 2001 16:49:54 -0500 I need some help. Our customer's web has been hacked. Do you know of any solution to secure ftp

firewall load balancer

2001-05-14 Thread acs
Anybody have experience with radware or foundry's firewall load balancers? I need something that works with an existing old application layer firewall. Foundry has a solution that looks like it is for packet filtering firewalls. Does cisco have something equivalent/better? TIA

Re: Is This True!?!

2001-05-14 Thread Carric Dooley
Each of the BSD's have a key focus: NetBSD - portability.. runs on like 38 platforms OpenBSD - Security FreeBSD - supports the most stuff as far as hardware and new toys. Carric Dooley Senior Consultant COM2:Interactive Media But this one goes to eleven. -- Nigel Tufnel On Mon, 14 May 2001,

Re: Is This True!?!

2001-05-14 Thread Alvin Oga
hi ya Each of the BSD's have a key focus: NetBSD - portability.. runs on like 38 platforms OpenBSD - Security FreeBSD - supports the most stuff as far as hardware and new toys. BSDi - commercial version ?? c ya alvin Carric Dooley Senior Consultant COM2:Interactive Media - [To

Re: Is This True!?!

2001-05-14 Thread Carric Dooley
I can't for the life of me figure out whey anyone would want to use BSDi with all the free OS's available. I know that's what's on the BigIP's, but I'm not sure why. I have played with BSDi, but I am not sure what it's forte is... if it has one. =) I would go open-source over commmercial in

Re: Is This True!?!

2001-05-14 Thread Alvin Oga
hi ya carric... yup..ditto ... but if they insist on using coommercial sw so be it..as long as they can mekt he right set of other choices... and than see where the fingers go or not... and forgot abut securebsd to add to the list c ya alvin http://www.linux-1U.net .. 3-5 nics in 1U ...

RE: Is This True!?!

2001-05-14 Thread Carric Dooley
IPSO is based on FreeBSD (an old version..., I am not even sure which, but I am pretty sure it's a 3.x rev). It has been highly customized however. I know there are all sorts of cool unsupported tools on the Nokia site. I would not try to run TOO much crap on my firewall however. The simpler