Re: question about proxy firewall

2003-09-26 Thread Haim Ashkenazi
[EMAIL PROTECTED] wrote: The point of a protocol-proxy is that you want to provide services to the outside world, but you don't trust your server software to be robust against protocol-level attacks (buffer overflows, primarily). Since one of the points of Debian is to fix bugs in software,

Re: question about proxy firewall

2003-09-26 Thread Javier Fernández-Sanguino Peña
On Thu, Sep 25, 2003 at 04:02:01PM +0300, Haim Ashkenazi wrote: Hi I've read an article about FreeBSD which made me read some parts of the FreeBSD docuemtations. in the firewall section there is a short description about proxy firewalls. I've made some more searching and found a free

Re: question about proxy firewall

2003-09-26 Thread Bob Snyder
On Fri, Sep 26, 2003 at 08:09:14PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: Just FYI, TIS was the company founded by Marcus Ranum which provided the firewall toolkit (see www.fwtk.org). The FWTK was the basis for the first commercial firewall: Gauntlet [1]. FWTK is not free in any sense,

Re: question about proxy firewall

2003-09-26 Thread Bernd Eckenfels
In article [EMAIL PROTECTED] you wrote: The point of a protocol-proxy is that you want to provide services to the outside world, but you don't trust your server software to be robust against protocol-level attacks (buffer overflows, primarily). It is also the other way around. Clients which

Re: question about proxy firewall

2003-09-26 Thread Bob Snyder
On Fri, Sep 26, 2003 at 08:09:14PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: Just FYI, TIS was the company founded by Marcus Ranum which provided the firewall toolkit (see www.fwtk.org). The FWTK was the basis for the first commercial firewall: Gauntlet [1]. FWTK is not free in any sense,

Re: question about proxy firewall

2003-09-26 Thread Haim Ashkenazi
Javier Fernández-Sanguino Peña wrote: Also, Checkpoint is not a proxy firewall (but it is starting to become like one with this new 'Application Intelligence' stuff) well, as I said I know very little about that, but someone told me that some commercial firewalls work at the application level

Re: question about proxy firewall

2003-09-26 Thread Bernd Eckenfels
In article [EMAIL PROTECTED] you wrote: The point of a protocol-proxy is that you want to provide services to the outside world, but you don't trust your server software to be robust against protocol-level attacks (buffer overflows, primarily). It is also the other way around. Clients which

question about proxy firewall

2003-09-25 Thread Haim Ashkenazi
Hi I've read an article about FreeBSD which made me read some parts of the FreeBSD docuemtations. in the firewall section there is a short description about proxy firewalls. I've made some more searching and found a free product called TIS which provide this functionality (which I thought was

Re: question about proxy firewall

2003-09-25 Thread dsr
On Thu, Sep 25, 2003 at 04:02:01PM +0300, Haim Ashkenazi wrote: I've read an article about FreeBSD which made me read some parts of the FreeBSD docuemtations. in the firewall section there is a short description about proxy firewalls. I've made some more searching and found a free product