From owner-freebsd-security Mon Dec 13 17:21:52 1999 Delivered-To: freebsd-security@freebsd.org Received: from vinyl.sentex.ca (vinyl.sentex.ca [209.112.4.14]) by hub.freebsd.org (Postfix) with ESMTP id 2E29915287 for ; Mon, 13 Dec 1999 17:21:44 -0800 (PST) (envelope-from mike@sentex.net) Received: from granite.sentex.net (granite-atm.sentex.ca [209.112.4.1]) by vinyl.sentex.ca (8.9.3/8.9.3) with ESMTP id UAA45348 for ; Mon, 13 Dec 1999 20:21:40 -0500 (EST) (envelope-from mike@sentex.net) Received: from ospf-mdt.sentex.net (ospf-mdt.sentex.net [205.211.164.81]) by granite.sentex.net (8.8.8/8.6.9) with SMTP id UAA08474 for ; Mon, 13 Dec 1999 20:21:39 -0500 (EST) From: mike@sentex.net (Mike Tancsa) To: freebsd-security@FreeBSD.ORG Subject: Re: Why use a Firewall? Date: Tue, 14 Dec 1999 01:21:38 GMT Message-ID: <38559b0b.1554822827@mail.sentex.net> References: In-Reply-To: X-Mailer: Forte Agent .99e/32.227 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 13 Dec 1999 11:15:10 -0500, in sentex.lists.freebsd.security you wrote: > >I have always wondered what does a firewall really do for one? I mean >why should one have one for their web servers and what kind of protection >does it give to protect against hackers or what not? >If i was to install a firewall what types of programs should I >install? > >Any responses would be appreciated. The servers i'm mainly running >would just be DNS, Web Server, and mail server. Spoofed addresses for one thing. There are many reasons. Sometimes if anything to protect known vulnerable services, and to limit access to services that do not warrent public exposure. These days, you really need to run one. I suggest browsing through your book store's computer security section. ---Mike Mike Tancsa (mdtancsa@sentex.net) Sentex Communications Corp, Waterloo, Ontario, Canada "Given enough time, 100 monkeys on 100 routers could setup a national IP network." (KDW2) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message