From owner-freebsd-questions Fri Oct 9 17:56:06 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA05673 for freebsd-questions-outgoing; Fri, 9 Oct 1998 17:56:06 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from quartz.sentex.ca (quartz.sentex.ca [209.112.4.8]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA05655 for ; Fri, 9 Oct 1998 17:55:49 -0700 (PDT) (envelope-from mike@sentex.net) Received: from gravel (ospf-mdt.sentex.net [205.211.164.81]) by quartz.sentex.ca (8.8.8/8.8.8) with SMTP id UAA17111; Fri, 9 Oct 1998 20:58:35 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <3.0.5.32.19981009210029.010b8080@sentex.net> X-Sender: mdtancsa@sentex.net X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32) Date: Fri, 09 Oct 1998 21:00:29 -0400 To: chad@dcfinc.com, questions@FreeBSD.ORG From: Mike Tancsa Subject: Re: firewalling In-Reply-To: <199810092329.QAA28466@freebie.dcfinc.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG At 04:29 PM 10/9/98 -0700, Chad R. Larson wrote: >Does anyone have an opinion (now there's a stupid question) about IP >firewalling vs TCP wrappers to protect a server exposed to the great >unwashed Internet? This is more of a question for 'questions' and I am following up there. TCP wrappers is nice for controlling anything out of inetd, but you have far more control by using ipfw and also better logging. Also, you can control UDP and icmp through ipfw and prevent people from throwing spoofed packets at your addresses, not to mention protect *other* machines on your network. ---Mike ********************************************************************** Mike Tancsa, Network Admin * mike@sentex.net Sentex Communications Corp, * http://www.sentex.net/mike Cambridge, Ontario * 01.519.651.3400 Canada * To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message