Hey,
well i suppose that 16xx doesn't support all the features of firewall in
12.x version of IOS. But whatever, i wouldn't make things complicated -
just use the firewall features on 16xx together with reflective
access-lists you can build quite secure environment. I'm not sure
whether interception features (as stopping dos attacks , not only flow
inspection) is supported by 16xx - also as IDS firewall features. Just
check information on Cisco's website. Or
http://iponeverything.net/cisco.shtml
If you are 'paranoic' about security - so i this way i would use the
scheme ->xDSl->16xx->Linux->Lan. But i would change it to
xDsl->16xx->OpenBSD->Lan. :-)
------------------------------
>Date: Fri, 6 Apr 2001 15:39:48 +0200 (MEST)
>From: Basti Bommel <[EMAIL PROTECTED]>
>Subject: Statefull&Packetfilter oder vice versa
>
>Hi everyone!
>To get some work for you all and to start some holy war ;-)
>
>If I plan to use a cisco16XX with security SW (doing some statefull
>inspection, which is better than the one of the PIX (says my personell
> CCIE ;-)) ) in combination with a packet filter IP-Chains or
netfilter,
>...
>
>Which way to do it: xDSL---CIO16XX---LINUX FW--LAN
>
>or: xDSL---LINUX FW--- CIO16XX--LAN
>or is this STUPID and I should only use ONE (and which)
>for my tiny (but top secret!) SOHO?
>
>Is there another cheap router with TWO Ethernet ports (without
security)?
>
>Hope to get some usefull hints!
>
>Basti
>
>- --
>GMX - Die Kommunikationsplattform im Internet.
>http://www.gmx.net
>
>- -
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
>
------------------------------
---------------------------------------------------------------------
Daniel Mester
Portal Tech. Manager
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
