|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Linux firewalling (Re: Routers vs. PC's for routing - was listproblems?)
SJS> Date: Thu, 23 May 2002 18:01:03 -0400 (EDT)
SJS> From: Steven J. Sobol
SJS> The box I want to build is passing packets between the rest
SJS> of my network (and the public Internet) and one server that
SJS> will hold sensitive data. It'll be a Linux box with the
SJS> TCP/IP stack running in bridged mode, with two ethernet
SJS> adapters installed. The box just needs to boot up and
SJS> run. It doesn't need to log anything.
Might I suggest { ipfw | ipf | pf } on *BSD? Depending on the
flavor you choose, you'd have some or all of:
Stateful filtering... ISN proxying... firewall rules that can't
be changed without a reboot... diverting packets to userland for
custom munching...
Not to turn NANOG into a BSD evangelism list, but many people who
grok BSD and Linux seem to choose BSD. Try it.
--
Eddy
Brotsman & Dreger, Inc. - EverQuick Internet Division
Phone: +1 (316) 794-8922 Wichita/(Inter)national
Phone: +1 (785) 865-5885 Lawrence
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <[email protected]>
To: [email protected]
Subject: Please ignore this portion of my mail signature.
These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <[email protected]>, or you are likely to
be blocked.
|