On Fri, 28 Jan 2005 13:40:05 -0600, Scott Harney <[EMAIL PROTECTED]> wrote:

> 
> I've only ever deployed OBSD as servers and most often as firewalls.  It is
> second to none as a firewall, in my book.

Same here.  However, have you ever tried running it as a firewall on a
gigabit link with a complex ruleset and about 400 hosts behind it,
plus NAT?  The benchmarks I saw predicted poor performance on OpenBSD
for this type of application.  However, when you want a secure
firewall, OpenBSD rocks.  I like the idea of the transparent bridge
with a firewall ruleset.  Totally invisible!

I do like the fact that it has IPSec AH/ESP VPN functionality built
into the kernel.

Reply via email to