Date: Fri, 15 Jan 1999 15:02:00 +0300 From: ark@eltex.ru To: mm@i.cz Cc: ark@eltex.ru, security@FreeBSD.ORG Subject: Re: examples rules ipfw Message-ID: <199901151202.PAA28751@paranoid.eltex.spb.ru> In-Reply-To: <XFMail.990114191745.mm@i.cz> from "Martin Machacek <mm@i.cz>"
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
nuqneH,
Martin Machacek <mm@i.cz> said :
> > More than strange way to do. natd is ugly.
>
> Agreed. Maybe I should try ipfilter. Does anybody know whether NAT that comes
> with ipfilter handles rsh correctly.
Not for now. But - there is an API that is defenitely better than natd's.
So it could be done..
>
> > why not to use TIS fwtk instead?
>
> Because of license.
Things could change, TIS definitely did not like that, NAI can have
different view on those things - have you try to ask them about
"temporary commercial license" or something alike..?
There are more funny details about that. See your mail.
> I unfortunately need it for a customer as a temporary
> solution until they gather enough budget to buy Gauntlet (which is not the
> greatest solution either).
Gauntlet is the best firewall on the market i've seen.
Sometimes too expensive, although.
_ _ _ _ _ _ _
{::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_
(##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_|
[||] [||] [||] Do i believe in Bible? Hell,man,i've seen one!
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
iQCVAwUBNp8uN6H/mIJW9LeBAQFzmgP/a744UnchXLBKJytBa8Doizx+bKCYa2TG
WNPFWH+qH3sHreWtzYKO425299+mTbWZIYMG3aNP1VqtBZVAouIx+aYr2dbP+dHn
PzV+DDZXTED8aK4LCdjaM64RdoHkQR0IzAdeNPlzcNCm+xJuiHmH+o2MHm3TNfs6
22sdi2eaBkQ=
=aMRq
-----END PGP SIGNATURE-----
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199901151202.PAA28751>