Tomas Bodzar wrote:
Yes, just another protection of perimeter. Even at home with cable connection I
can see a lot of attempts to break to my computers on log device for pf(4)
either from remote countries like China, Bulgaria and similar or even from
neighbours around me. And yes, there is a firewall on cable router and firewall
on switch from cable vendor downstairs.
You might wana try a better router if you can afford it :-)
Something like a Cisco 800 series will provide IDS and IPS protection
depending on the model and has a very strong NAT too which is not
penetrable easily and cannot bring down the system if attacked.
Another thing you could do is provide a heck of a lot of ACL's in the
machine also in conjunction with the IDS and IPS protection systems.......
Just an option but since I didn't catch the beginning of the thread it
may not be valid!
If you have the budget go for a Cisco ASA security appliance but then
that I reckon for home is overkill by a big margin as that's normally
for enterprise grade systems.
Regards,
Kaya
_______________________________________________
opensolaris-help mailing list
opensolaris-help@opensolaris.org
