Re: Ammunition needed to defend OpenBSD/pf

2005-08-04 Thread J.C. Roberts
On Wed, 3 Aug 2005 18:26:52 -0600 (MDT), Diana Eichert [EMAIL PROTECTED] wrote: just use some 50cal BMG rounds, that should be effective ammunition. sorry, I just had to after following this thread for awhile I think you're taking the phrase Bullet-Proof Software a bit too literally. ;-) JCR

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Melameth, Daniel D.
Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Anybody know what, if anything, it does that an

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Rod.. Whitworth
On Tue, 02 Aug 2005 22:54:22 -0500, Shawn K. Quinn wrote: On Tue, 2005-08-02 at 22:09 -0400, Jim Fron wrote: What it does that an OBSD solution can't is be low power, cheap, and bought off the shelf (maybe there are off-the-shelf suppliers of OBSD machines, but they aren't in every strip

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Alexander Farber
Hi, I have 1 argument for D-Link and against OpenBSD: D-Link can DSL. OpenBSD can not. So you have to buy at least a DSL modem for OpenBSD. And since you are buying a DSL modem, why not add 20 Euros and buy a DSL-router? At least for a small home network. Regards Alex

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Paul de Weerd
On Wed, Aug 03, 2005 at 10:30:25AM +0200, Alexander Farber wrote: | Hi, | | I have 1 argument for D-Link and against OpenBSD: | | D-Link can DSL. OpenBSD can not. So you have to | buy at least a DSL modem for OpenBSD. And since you | are buying a DSL modem, why not add 20 Euros and | buy a

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Raymond Lillard
Melameth, Daniel D. wrote: Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Anybody know what, if

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Erik Wikström
On 2005-08-03 03:03, Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Anybody know what, if anything,

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread J.C. Roberts
On Wed, 03 Aug 2005 11:03:34 +1000, Rod.. Whitworth [EMAIL PROTECTED] wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles.

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Rod.. Whitworth
On Wed, 3 Aug 2005 11:03:23 +0200, Paul de Weerd wrote: On Wed, Aug 03, 2005 at 10:30:25AM +0200, Alexander Farber wrote: | Hi, | | I have 1 argument for D-Link and against OpenBSD: | | D-Link can DSL. OpenBSD can not. So you have to | buy at least a DSL modem for OpenBSD. And since you | are

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod.. Whitworth Sent: Tuesday, August 02, 2005 9:04 PM To: Miscellaneous OBSD Subject: Ammunition needed to defend OpenBSD/pf Somebody sent me a query asking for a justification for my proposal to

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Rob
I do not know what a system looks like to an attacker trying to fingerprint you using boxes from Office Depot. However, I would hope that using OpenBSD/pf that I could advertise the fact that I am using OpenBSD/pf, and someone would just move on to their next target. Sincerely, Rob

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Frank Bax
At 04:30 AM 8/3/05, Alexander Farber wrote: I have 1 argument for D-Link and against OpenBSD: D-Link can DSL. Does it really? My D-link router (at home) is tossing SYN attacks back to the modem (as determined by ISP monitoring) causing the DSL modem to lockup. I am eager to learn how to

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Shawn K. Quinn
On Wed, 2005-08-03 at 10:30 +0200, Alexander Farber wrote: Hi, I have 1 argument for D-Link and against OpenBSD: D-Link can DSL. OpenBSD can not. So you have to buy at least a DSL modem for OpenBSD. And since you are buying a DSL modem, why not add 20 Euros and buy a DSL-router? At

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Larry McKevitt
On Wed, 2005-08-03 at 09:47 -0400, Will H. Backman wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod.. Whitworth Sent: Tuesday, August 02, 2005 9:04 PM To: Miscellaneous OBSD Subject: Ammunition needed to defend OpenBSD/pf

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Shawn K. Quinn
On Wed, 2005-08-03 at 09:47 -0400, Will H. Backman wrote: Many of these devices provide the what if I get hit by a bus protection of a simple, single purpose system. If you use something like OpenBSD, it can be viewed as a homegrown application that must be supported by the organization, and

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Matt Garman
On Wed, Aug 03, 2005 at 02:35:07AM -0700, J.C. Roberts wrote: your FUD look, just level with them. If you really want me to go into all the various technical details involved in a full source code audit the costs you would bear to do an equivalent audit on a closed source binary through

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Jim O'Donald
Of chefren Sent: Wednesday, August 03, 2005 12:47 PM To: misc@openbsd.org Subject: Re: Ammunition needed to defend OpenBSD/pf On 08/03/05 19:25, Shawn K. Quinn wrote: You mean having the DSL router and modem be in the same physical box, thus introducing a single point of failure? That's a huge

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Dave Feustel
On Wednesday 03 August 2005 01:15 pm, Jim O'Donald wrote: Using your example of a power supply lasting 10 years, that would translate to 2 failures in 10 years, not 1 failure in 5 years. And if the box is properly designed, it will continue running unless both power supplies fail simultaneously

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread chefren
On 08/03/05 20:55, Dave Feustel wrote: On Wednesday 03 August 2005 01:15 pm, Jim O'Donald wrote: Using your example of a power supply lasting 10 years, that would translate to 2 failures in 10 years, not 1 failure in 5 years. And if the box is properly designed, it will continue running

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread chefren
On 08/03/05 20:15, Jim O'Donald wrote: That logic is completely false and you contradict yourself. Pooh pooh. Allowing for multiple points of failure does not mean that something is less reliable as you have described. It means that if/when one fails, the other will still be available. But

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Kevin
On 8/3/05, Matt Garman [EMAIL PROTECTED] wrote: I think everyone on this list has done a wonderful job explaining why an OpenBSD box will beat the D-Link practically hands-down. The cynical side of me thinks that managers, no matter how great the reality of OpenBSD, are likely to reject it

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Jesper Louis Andersen
chefren wrote: Two equal power supplies in line: Twice as much the risk of a brakedown of the system and two times as much failures of power supplies. Lets see. Let X be the (boolean) random variable designating ''system X breaks down in the first N years''. Equally, let Y be the random

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Karsten McMinn
On 8/3/05, Matt Garman [EMAIL PROTECTED] wrote: The cynical side of me thinks that managers, no matter how great the reality of OpenBSD, are likely to reject it based on a fear and/or ignorance of open source, or with logic like, Well if it's so good, how come I've never heard of it? The same

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Diana Eichert
just use some 50cal BMG rounds, that should be effective ammunition. sorry, I just had to after following this thread for awhile

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Graeme Lee
Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Well, I we connected a new client with straight

Re: Ammunition needed to defend OpenBSD/pf

2005-08-02 Thread Aaron Glenn
On 8/2/05, Rod.. Whitworth [EMAIL PROTECTED] wrote: Anybody know what, if anything, it does that an OBSD solution doesn't/ cannot, that may be important? Complete documentation and source code you can not only look at, but modify if you're so inclined. aaron.glenn

Re: Ammunition needed to defend OpenBSD/pf

2005-08-02 Thread Bob Beck
* Aaron Glenn [EMAIL PROTECTED] [2005-08-02 19:01]: On 8/2/05, Rod.. Whitworth [EMAIL PROTECTED] wrote: Anybody know what, if anything, it does that an OBSD solution doesn't/ cannot, that may be important? Complete documentation and source code you can not only look at, but modify if

Re: Ammunition needed to defend OpenBSD/pf

2005-08-02 Thread Lars Hansson
On Wed, 03 Aug 2005 11:03:34 +1000 Rod.. Whitworth [EMAIL PROTECTED] wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and

Re: Ammunition needed to defend OpenBSD/pf

2005-08-02 Thread Steve Shockley
Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. The DLink doesn't have failover or load balancing.

Re: Ammunition needed to defend OpenBSD/pf

2005-08-02 Thread Qv6
The next firmware or os version may require the purchase of a new appliance because these upgrades will not support your appliance. On the other hand, you can bet that a new release of obsd/pf will not require the purchase of new hardware. On Tuesday 02 August 2005 08:03 pm, Rod.. Whitworth

Re: Ammunition needed to defend OpenBSD/pf

2005-08-02 Thread Jim Fron
On Aug 2, 2005, at 9:03 PM, Rod.. Whitworth wrote: Anybody know what, if anything, it does that an OBSD solution doesn't/ cannot, that may be important? Or alternatively the reverse. What it does that an OBSD solution can't is be low power, cheap, and bought off the shelf (maybe there

Re: Ammunition needed to defend OpenBSD/pf

2005-08-02 Thread Shawn K. Quinn
On Tue, 2005-08-02 at 22:09 -0400, Jim Fron wrote: What it does that an OBSD solution can't is be low power, cheap, and bought off the shelf (maybe there are off-the-shelf suppliers of OBSD machines, but they aren't in every strip mall in the country). To the third of those, I agree. To the