On Tue, 19 Feb 2002, Martin Peikert wrote:

> It's not the OS that will solve your problems. The security of an OS is 
> dependend of the ability and knowledge of it's administrator. If you are 

It's also dependent on its codebase (size, complexity, design, 
implementation.)

> more familiar with Linux, stay with Linux. If you are interested in a OS 
> that is focussed on security, try OpenBSD.

Familiarity is something that should be balanced against homogenity of the 
environment.  If your security infrastrcture is the same as your server 
infrastructure, then there's the potential that a single problem will more 
likely affect both systems.

The OBSD work really has more relevence in servers than firewalls, as most 
of the exploited services shouldn't be running on a firewall in the first 
place.  Other than the ICMP kernel bug recently, there's not much that 
should have affected a well-configured Linux firewall in the last couple 
years.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
[EMAIL PROTECTED]      which may have no basis whatsoever in fact."

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to