Kiss Csaba wrote: > > Hi all, > > What type of your firewall ? Packet-filtering or proxy-based or > statefull or other In principle it is open to any concept. We use a combination of packet-filtering (standard linux kernel) and proxies (e.g. for ftp which is a nightmare to packet-filter).
But if you use the sifi kernel module, you can have stateful inspection as well (I hope that standard kernel 2.4.x will get a stateful inspection module sometimes - maybe I will write one using the netfilter API). greets, Rene

