> Brian:
>
> Of course I want start a flamewar!! :) that is the idea...
>
> I heard that the Linux Firewalls doesn't harden the operating system, Is
> this true? and I heard that Checkpoint have a FW-1 for Linux.
Yes, yes it is. The reason is simple: a Linux firewall
(ipfwadm/ipchains) does exactly that. It firewalls. Nothing more.
Which follows the whole Linux/Unix philosophy -- do one thing, and do
it well.
> For Linux plataforms Are there only packet filters firewalls? or Are there
> Proxy and stateful?
Think about this... you said that Checkpoint has released Firewall-1
for Linux. Is it a packet filtering firewall? Or a proxy firewall?
Or is it both? (which I believe it is)
As for the stateful packet filtering, I've always not understood that.
So long as you can specify IP flags within your filtering rules, it is
technically a stateful firewall. You just need to specify the SYN and
FIN flags.
> Well I made this "open questions" to receive your opinion
>
>
> Thanks!
>
> [EMAIL PROTECTED] writes:
>>Careful: you might start a flamewar. :)
>>
>>Just quick, while I have time.
>>
>>The advantages of a Linux firewall:
>> * free
>> * runs on anything
>> * can be locked down (ie. disable all services)
>>
>>disadvantages
>> * can be difficult to configure
>> * is difficult to lock down
>> * packet filtering has issues with ICQ and other ICMP packets
>>
>>Personal preferred alternatives:
>>
>> OpenBSD. More secure, in general. Cleaner design. Although founded in
>>aesthetics, my preference is a reflection of opinion.
>>
>>Cheers!
>>Brian
>>
>>> Hi everybody:
>>>
>>> Does anyone tell me the advantages and disvantages of a Linux Firewall?
>>>
>>>
>>> Saludos
>>> Fredy R. Santana V.
>>> Ingeniero Civil El�ctrico
>>> Orion 2000 - Consultor�a en Seguridad y Redes
>>> La Concepcion 322 piso 12, Providencia.
>>> Fono: 6403944 - [EMAIL PROTECTED]
>>>
>>> -
>>> [To unsubscribe, send mail to [EMAIL PROTECTED] with
>>> "unsubscribe firewalls" in the body of the message.]
>>>
>>
>>
>
>
>
> Saludos
> Fredy R. Santana V.
> Ingeniero Civil El�ctrico
> Orion 2000 - Consultor�a en Seguridad y Redes
> La Concepcion 322 piso 12, Providencia.
> Fono: 6403944 - [EMAIL PROTECTED]
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
