The only ultimately secure firewall, as per Marcus Ranum.
http://pubweb.nfr.net/~mjr/pubs/a1fwall/index.htm
Enjoy.
-----Original Message-----
From: daveo [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, June 21, 2000 12:06 AM
To: robert bonomi; [EMAIL PROTECTED]
Subject: Re: Best Firewall Product.
I hope I'm not being "sucked in" here but can somebody point me to more
info
on the 'ultimate firewall'
----- Original Message -----
From: robert bonomi <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 21, 2000 12:28 PM
Subject: Re: Best Firewall Product.
> > Date: Tue, 20 Jun 2000 05:10:25 -0700 (PDT)
> > From: Ravi Kumar <[EMAIL PROTECTED]>
> > Subject: Best Firewall Product.
> > To: [EMAIL PROTECTED]
> >
> > I'm looking for Firewall solutions, can somebody
> > suggest me the best product and any comparision study
> > of available products.
> >
>
> The "best" firewall is, without question, mjr's "ultimate firewall".
>
> Simple, elegant, and as long as nobody sets up 'unapproved' routes
that
> go around it, absolutely effective.
>
> It would have blocked any and all of the recent spate of things like
> "Melissa", and "I Love You" -- the only way any of those things could
> have reached the protected network would be to have 'gone around' the
> fire-wall, somehow/somewhere.
>
> I'm not sure about current pricing, last time I did have occasion to
check,
> it was _very_ reasonable.
>
> It's virtually fool-proof, requires hardly administration/managment,
and
> scales to protect _any_ size/speed of network.
>
> Best of all, it's a _completely_open_ archtecture.
>
> There's only one drawback -- the security policy it implements may be
a
bit
> _too_ draconian for your taste.
>
>
> Seriously, the 'best' firewall is the one that best meets your
requirements
> for implementning your security policy, on your network, with an
acceptable
> level of administrative workload, and a tolerable financial cost. It
all
> depends on _what_ you're protecting, what it's value is to others, and
what
> the cost of a 'disruption' of your normal operations would be. Since
you
> haven't provided any information on *ANY* of those areas, any attempt
to
> describe "what's best" for you will be a WAG, at *best*, by the person
so
> doing.
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
