Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 May 1998 19:40:31 GMT
From:      ovb@ovb.ch (Oliver von Bueren)
To:        isp@FreeBSD.ORG
Subject:   Re: Firewall software
Message-ID:  <3570b5e6.1286776386@mail.ovb.ch>
In-Reply-To: <D1C34C054DEAD111ACF700C0A850A45A58DB@gershwin.careergateway.com>
References:  <D1C34C054DEAD111ACF700C0A850A45A58DB@gershwin.careergateway.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 25 May 1998 18:49:24 +0800, you wrote:

>Does anyone have any recommendation for a firewall software to use on
>the FreeBSD box?
>I have been referred to Gauntlett and Checkpoint Firewall-1.  How do
>they compare?  Or would they be an overkill and instead I should use
>simply ipfw that comes with freeBSD?

I'd suggest you take a look into fwtk v1.3, this is what is in the
port collection, or take the original directly from
http://www.tis.com/, last time I checked the current version was at
2.0 something. This is the small brother of Gauntlett, without all the
mess with the configuration tools, which you don't need anyway, you
know better what you do if you do it yourself. I think it's still free
to use.

ipfw is IMHO not a firewall but a packet filter which you can use to
build kind of a firewall. You need to know if you want a maximum
security solution, the I would strongly discourage to use any software
that forwards ip packets in favor of a proxy aproach, which is what
fwtk is. 


       Cheers,
       Oliver


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3570b5e6.1286776386>