Many people feel that the *BSDs are more secure by nature. In a
nutshell, they have a much slower rate of change in their code. In
intent, at least, OpenBSD would be the most secure. I would look into
it for any BSD based firewall.
Having a cursory look at the Drawbridge website I'd say they are
adding performance not features to the existing packet filter which is
much like the one available in linux. So, on that level, not much
difference. The keys are things like code review (OpenBSD hallmark)
and how much system hardening you're capable of doing. On that last
subject someone has likely written a book, so I'll leave it at that.
-Rich
On Fri, 5 May 2000, Myron Jabido wrote:
> Hello,
>
> I guess I should be more specific on my question. It's going to be my job
> to setup this firewall on a system running RedHat Linux. My boss had heard
> of Drawbridge, which as far as we know is only compatible with FreeBSD, not
> RedHat Linux. He said that he'd be willing to get FreeBSD and Drawbridge if
> it's more secure, but we would like to see if the security features of
> RedHat Linux are adequate. Does anyone have any experience with this?
>
> Thanks again.
>
> Myron
> ________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
--
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]