Re: SCO 5.0.7 AS FIREWALL
From: Jeff Liebermann (jeffl_at_comix.santa-cruz.ca.us)
Date: 05/25/05
- Previous message: Bill Vermillion: "Re: SCO 5.0.7 AS FIREWALL"
- In reply to: Tony Lawrence: "Re: SCO 5.0.7 AS FIREWALL"
- Next in thread: Tony Lawrence: "Re: SCO 5.0.7 AS FIREWALL"
- Reply: Tony Lawrence: "Re: SCO 5.0.7 AS FIREWALL"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Wed, 25 May 2005 03:30:02 GMT
On Tue, 24 May 2005 17:47:56 -0400, Tony Lawrence <foo@pcunix.com>
wrote:
>My purpose is simply to protect myself from my own stupidity (an
>abundant supply of that is always stocked), though it does help that I
>can upgrade or temporarily disable any component without worrying much
>about what will happen. On the con side, when I do want to let
>something in, it becomes a real PITA - but it should be, imho. I had
>quite an argument about just this subject recently: see
>http://aplawrence.com/Security/valuefirewalls.html
Nice article. I consider a minimal hardware firewall to be a basic
pre-requisite to being on the internet, even if the benifits are
dubious. My office LAN is similar to yours. Double NAT firewall with
the important office machines on the inside of the 2nd layer of
firewalls. This mess is necessary because I'm constantly bringing
customers virus and worm infected machines into the office and don't
need them attacking my office servers. However, this is an unusual
situation that I would not expect to be popular.
Also, firwalls tend to have their own security issues. I suggest
running the firewall tests at:
http://www.pcflank.com/exploits.htm
and see how well you do. My Linksys BEFW11S4v4 hangs on 2 of the
tests. My Linksys WRT54gv1.1 with Sveasoft Alchemy firmware, passes
all the tests.
-- # Jeff Liebermann 150 Felker St #D Santa Cruz CA 95060 # 831.336.2558 voice http://www.LearnByDestroying.com # jeffl@comix.santa-cruz.ca.us # jeffl@cruzio.com AE6KS
- Previous message: Bill Vermillion: "Re: SCO 5.0.7 AS FIREWALL"
- In reply to: Tony Lawrence: "Re: SCO 5.0.7 AS FIREWALL"
- Next in thread: Tony Lawrence: "Re: SCO 5.0.7 AS FIREWALL"
- Reply: Tony Lawrence: "Re: SCO 5.0.7 AS FIREWALL"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|