From owner-freebsd-security  Wed Nov 21 11:19:50 2001
Delivered-To: freebsd-security@freebsd.org
Received: from e-shipley.com (dws-66-177-28-52.jacksonville.net [66.177.28.52])
	by hub.freebsd.org (Postfix) with ESMTP id 7EDA137B405
	for <security@FreeBSD.ORG>; Wed, 21 Nov 2001 11:19:43 -0800 (PST)
Received: (from steve@localhost)
	by e-shipley.com (8.11.6/8.11.1) id fALJJgH03507;
	Wed, 21 Nov 2001 14:19:42 -0500 (EST)
	(envelope-from steve)
Date: Wed, 21 Nov 2001 14:19:42 -0500 (EST)
From: "Stephen T. Shipley" <steve@e-shipley.com>
Message-Id: <200111211919.fALJJgH03507@e-shipley.com>
To: fgermano@audiotel.com.ar, security@FreeBSD.ORG
Subject: Re: Best security topology for FreeBSD
In-Reply-To: <00ca01c172aa$814c90d0$ed64a8c0@audi2k>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Try "hlfl" located in /usr/ports/security/hlfl. Very useful for 
evaluating the management languages for ipfw, ipfilter, ipfwadm, ipchains, netfilter, and cisco.

In a crunch you need to be quick. So I would favor ease of management (ipfilter).

--Steve

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message