I don't think FW-1 is somehow "superior" to IPFIlter. I'd even say IPFilter was designed for clear purpose and it does its job well. FW-1 is an ugly attempt to extend the stateful filtering technology to serve tasks it does not fit good (and never will).
If you want THE #1, get a real performance-optimezed thing, say, Netscreen for your DMZ and a good proxy firewall for your LAN and avoid FW-1 like hell. On Fri, Dec 06, 2002 at 01:48:37PM -0500, Vedran Bender wrote: > Less powerful than FireWall-1, but quite similar and pretty good. > > If you ask me, IPFilter's main feature is stateful inspection and NAT > redirection, everything else is similar to FW-1 in many ways, but then > again, these are the concepts that any modern firewalling software supports > these days. > > Everyone will most likely have their own advantages to IPFilter, as we all > integrate it to fit our own designs and purposes. > > If you want THE #1, then be prepared to spit $20,000 USD on an enterprise > license and get FireWall-1. > > > -----Original Message----- > > From: Alejandro Cabrera Obed [mailto:[EMAIL PROTECTED]] > > Sent: Friday, December 06, 2002 12:04 PM > > To: IPFilter (mailing list) > > Subject: IPFilter comparison > > > > > > Hi !!! > > > > Can you tell me if IPFILTER is more, less or equal powerful > > than others > > firewall or similar software as Firewall-1, SunScreen, etc... ??? > > What are IPFilter's main advantages ??? > > I use Sun / Solaris 7. > > > > Thanks a lot, regards !!! > > > > Alejandro Cabrera Obed > > E-mail: [EMAIL PROTECTED] > > > > -- _ _ _ _ _ _ _ {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one!
