From owner-freebsd-security@FreeBSD.ORG Thu Mar 27 06:55:41 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DD5C737B401 for ; Thu, 27 Mar 2003 06:55:41 -0800 (PST) Received: from annaconda.mitternachtsstun.de (p3EE229D7.dip.t-dialin.net [62.226.41.215]) by mx1.FreeBSD.org (Postfix) with ESMTP id 191FB43FAF for ; Thu, 27 Mar 2003 06:55:38 -0800 (PST) (envelope-from lordbyte@annaconda.mitternachtsstun.de) Received: from annaconda.mitternachtsstun.de (localhost [127.0.0.1]) h2REtVDR014075; Thu, 27 Mar 2003 15:55:31 +0100 Received: (from lordbyte@localhost)h2REtPkd014073; Thu, 27 Mar 2003 15:55:25 +0100 Date: Thu, 27 Mar 2003 15:55:25 +0100 From: Markus Boelter To: Giorgos Keramidas , freebsd-security@freebsd.org Message-ID: <20030327145525.GF24413@mitternachtsstun.de> References: <3E82386C.000003.20487@ns.interchange.ca> <20030327103945.GA8208@gothmog.gr> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030327103945.GA8208@gothmog.gr> User-Agent: Mutt/1.4i X-Spam-Status: No, hits=-31.3 required=5.0 tests=EMAIL_ATTRIBUTION,IN_REP_TO,QUOTED_EMAIL_TEXT, RCVD_IN_NJABL,REFERENCES,REPLY_WITH_QUOTES,USER_AGENT_MUTT, X_NJABL_DIALUP autolearn=ham version=2.50 X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.50 (1.173-2003-02-20-exp) Subject: Re: Multiple Firewalls with ipfilter? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Mar 2003 14:55:43 -0000 Hi! On Thu, Mar 27, 2003 at 12:39:45PM +0200, Giorgos Keramidas wrote: > Hmmm, you could probably do some ingenious stuff with ipfs and a > shared disk partition, where the 'active' firewall save its state > periodically. When this falls over, the code that handles the switch > to the 'backup' machine could reload the state from the shared disk :) Hm - and if the disk fails, you don't have redundancy :)) cu! Markus -- please don't send me any html-messages! pgp-fingerprint: 0FFC 3A33 8B54 DDB9 0F3D BFD5 CFB1 6038 FB0E 1D5B pgp-public-key: http://www.mitternachtsstun.de/gpg-key.markus.txt