On Tue, 2002-02-19 at 07:49, Danny Zak wrote: > Dear users; > > we are trying to lookup some information about which distr. to use for > this linux ipchains, filters, nats.. ? > > i saw freebsd popping up all the time; is this stabler; faster; or different > (in which way?); or limited ? in comparision to a linux (redhat) distr ? > > as system op; i'm more familiar with linux distris; is it better to > stay with linux ? >
Danny, [Full disclosure: I work for a security company, we offer bespoke Linux managed systems and others, natch] >From a security point of view, there's very little to choose between *BSD and Linux. Most of the potential vulnerabilities are due to the security policy, which is of course human-maintained. If you already have experience with Linux, then you're likely to be better off sticking with it. iptables (which replaced ipchains in the 2.4 Linux kernel) handles filtering and NAT for you with the right commands. Hope this helps, Greg Sheard Technical Consultant ECSC Ltd. www.ecsc.co.uk The information in this email is confidential and legally privileged. It is intended solely for the addressee. Access to the email by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken upon reliance on it, is prohibited and unlawful. When addressed to our clients any opinions or advice contained in this email are subject to the terms and conditions expressed in the governing ECSC Conditions of Service. The contents of any attachment may contain viruses. Whilst ECSC has taken reasonable precautions to minimise risk we cannot accept liability for any damage you sustain as a result of software viruses. You should carry out your own virus checks before opening any attachments. ECSC Ltd Registered in England and Wales No.3964848 2 Fieldhead Street, Fieldhead Business Centre Bradford, BD7 1LW _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
