Re: [Leaf-devel] OO Firewall Design

2001-01-03 Thread Anh (Ly) Vuong
Sorry for butting in middle of the conversation; and please let me know if I make an ASS.. out of myself! :) Can we abstract these networking terms as follow: IS (Intermediate System), ES (End System) (OSIism here). And for each IS or ES, it provides one or more SERVICES. HTTP, FTP, Telnet

Re: [Leaf-devel] OO Firewall Design

2001-01-03 Thread David Douthitt
On 3 Jan 2001, at 16:33, David Douthitt wrote: > I'm thinking about this some... > Thinking on this, the Fence idea makes all the problems we've seen: > you not only have to allow one way but also the other. > > The Network Idea simplifies things slightly, but creates the problem > in that the

Re: [Leaf-devel] OO Firewall Design

2001-01-03 Thread Mike Noyes
I doubt this will help the current discussion, but I think it's noteworthy. There is a new FAQ by Daniel Swan for comp.os.linux.security at: http://www.linuxsecurity.com/docs/colsfaq.html -- Mike Noyes <[EMAIL PROTECTED]> http://leaf.sourceforge.net/ ___

[Leaf-devel] OO Firewall Design

2001-01-03 Thread David Douthitt
I'm thinking about this some... and there are some problems with thinking about firewalls that I see: - the point of view from a firewall is conceptually that of a Fence: there is THIS side and THAT side and we see and allow and reject things going between. - Alternate conceptual views: that