Date: Fri, 19 Jan 2001 15:53:42 -0800 From: Jason DiCioccio <Jason.DiCioccio@Epylon.com> To: 'Jorge Peixoto Vasquez' <jorge@aker.com.br>, Sean Lutner <sean@rentul.net> Cc: security@freebsd.org Subject: RE: Failover firewalls with ipfw? Message-ID: <657B20E93E93D4118F9700D0B73CE3EA0243A0@goofy.epylon.lan>
next in thread | raw e-mail | index | archive | help
This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_000_01C08273.0D80F920 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C08273.0D80F920" ------_=_NextPart_001_01C08273.0D80F920 Content-Type: text/plain; charset="iso-8859-1" -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Better than PIX? That's not a tough claim considering PIX has more holes in it than the Titanic :-) Just thought I'd throw my PIX gripe in there. - -JD- - ------- Jason DiCioccio Evil Genius Unix BOFH mailto:jasond@epylon.com 415-593-2761 Direct & Fax 415-593-2900 Main Epylon Corporation 645 Harrison Street, Suite 200 San Francisco, CA 94107 www.epylon.com BSD is for people who love Unix - Linux is for people who hate Microsoft - -----Original Message----- From: Jorge Peixoto Vasquez [mailto:jorge@aker.com.br] Sent: Friday, January 19, 2001 12:34 PM To: Sean Lutner Cc: security@freebsd.org Subject: Re: Failover firewalls with ipfw? Sean Lutner wrote: > I'm currently doing some research into firewalls, and which one(s) > would be right for my network. I'm considering everything from > Checkpoint-1, to Cisco Pix, to ipchains, to ipfw on FreeBSD. My > question is this. Does anyone out there know of any > utilities/code/addons I could use to > implement a failover pair of firewalls using ipfw and fbsd? Ideally > I'd like to do stateful failover, but having two machines always on > and a heartbeat solution might wirk as well. If anyone can offer > some pointers, it would be much appreciated. > Dear Mr. Sean Lutner, Our product does everything you want (except for stateful failover) and, altough not open-sourced, is much cheaper than these commercial solutions you want. Altough a little bit unknown outside Brazil, we have no fear of saying our product is at least in par with Checkpoint Fw1 or Pix, for instance. Please take a look at our web page and download a free (english, of course) evaluation version. If you prefer, please send me your address and I'll have our customer service dept mail you a CD ASAP. jOrge - -- Jorge Peixoto Vasquez, Elet. Eng. Aker Security Solutions Manufacturer of the FreeBSD/Linux Aker Firewall http://www.aker.com.br tel. +55 - 61 - 340 9083 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBOmjT4FCmU62pemyaEQIPeQCg5jT0FkKgyNB3nC9j9TiTXRjG6DsAnj6N R/skYSbPpn/5IYcixaQ5e8qx =m7PA -----END PGP SIGNATURE----- ------_=_NextPart_001_01C08273.0D80F920 Content-Type: text/html; charset="iso-8859-1" <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12"> <TITLE>RE: Failover firewalls with ipfw?</TITLE> </HEAD> <BODY> <P><FONT SIZE=2>-----BEGIN PGP SIGNED MESSAGE-----</FONT> <BR><FONT SIZE=2>Hash: SHA1</FONT> </P> <P><FONT SIZE=2>Better than PIX? That's not a tough claim considering PIX has more</FONT> <BR><FONT SIZE=2>holes in it than the Titanic :-)</FONT> </P> <P><FONT SIZE=2>Just thought I'd throw my PIX gripe in there.</FONT> </P> <P><FONT SIZE=2>- -JD-</FONT> </P> <BR> <P><FONT SIZE=2>- -------</FONT> <BR><FONT SIZE=2>Jason DiCioccio</FONT> <BR><FONT SIZE=2>Evil Genius</FONT> <BR><FONT SIZE=2>Unix BOFH</FONT> </P> <P><FONT SIZE=2><A HREF="mailto:jasond@epylon.com">mailto:jasond@epylon.com</A></FONT> </P> <P><FONT SIZE=2>415-593-2761 Direct & Fax</FONT> <BR><FONT SIZE=2>415-593-2900 Main</FONT> </P> <P><FONT SIZE=2>Epylon Corporation</FONT> <BR><FONT SIZE=2>645 Harrison Street, Suite 200</FONT> <BR><FONT SIZE=2>San Francisco, CA 94107</FONT> <BR><FONT SIZE=2>www.epylon.com</FONT> </P> <P><FONT SIZE=2>BSD is for people who love Unix -</FONT> <BR><FONT SIZE=2>Linux is for people who hate Microsoft</FONT> </P> <BR> <P><FONT SIZE=2>- -----Original Message-----</FONT> <BR><FONT SIZE=2>From: Jorge Peixoto Vasquez [<A HREF="mailto:jorge@aker.com.br">mailto:jorge@aker.com.br</A>]</FONT> <BR><FONT SIZE=2>Sent: Friday, January 19, 2001 12:34 PM</FONT> <BR><FONT SIZE=2>To: Sean Lutner</FONT> <BR><FONT SIZE=2>Cc: security@freebsd.org</FONT> <BR><FONT SIZE=2>Subject: Re: Failover firewalls with ipfw?</FONT> </P> <BR> <P><FONT SIZE=2>Sean Lutner wrote:</FONT> <BR><FONT SIZE=2>> I'm currently doing some research into firewalls, and which one(s)</FONT> <BR><FONT SIZE=2>> would be right for my network. I'm considering everything from</FONT> <BR><FONT SIZE=2>> Checkpoint-1, to Cisco Pix, to ipchains, to ipfw on FreeBSD. My</FONT> <BR><FONT SIZE=2>> question is this. Does anyone out there know of any</FONT> <BR><FONT SIZE=2>> utilities/code/addons I could use to</FONT> <BR><FONT SIZE=2>> implement a failover pair of firewalls using ipfw and fbsd? Ideally</FONT> <BR><FONT SIZE=2>> I'd like to do stateful failover, but having two machines always on</FONT> <BR><FONT SIZE=2>> and a heartbeat solution might wirk as well. If anyone can offer</FONT> <BR><FONT SIZE=2>> some pointers, it would be much appreciated.</FONT> <BR><FONT SIZE=2>> </FONT> </P> <P><FONT SIZE=2>Dear Mr. Sean Lutner,</FONT> </P> <P><FONT SIZE=2>Our product does everything you want (except for stateful failover)</FONT> <BR><FONT SIZE=2>and,</FONT> <BR><FONT SIZE=2>altough not open-sourced, is much cheaper than these commercial</FONT> <BR><FONT SIZE=2>solutions you want.</FONT> </P> <P><FONT SIZE=2>Altough a little bit unknown outside Brazil, we have no fear of</FONT> <BR><FONT SIZE=2>saying</FONT> <BR><FONT SIZE=2>our product is at least in par with Checkpoint Fw1 or Pix, for</FONT> <BR><FONT SIZE=2>instance. </FONT> </P> <P><FONT SIZE=2>Please take a look at our web page and download a free (english, of</FONT> <BR><FONT SIZE=2>course) evaluation version. If you prefer, please send me your</FONT> <BR><FONT SIZE=2>address</FONT> <BR><FONT SIZE=2>and I'll have our customer service dept mail you a CD ASAP.</FONT> </P> <P><FONT SIZE=2>jOrge</FONT> <BR><FONT SIZE=2>- -- </FONT> <BR><FONT SIZE=2>Jorge Peixoto Vasquez, Elet. Eng.</FONT> <BR><FONT SIZE=2>Aker Security Solutions</FONT> <BR><FONT SIZE=2>Manufacturer of the FreeBSD/Linux Aker Firewall</FONT> <BR><FONT SIZE=2><A HREF="http://www.aker.com.br" TARGET="_blank">http://www.aker.com.br</A></FONT> <BR><FONT SIZE=2>tel. +55 - 61 - 340 9083</FONT> </P> <BR> <P><FONT SIZE=2>To Unsubscribe: send mail to majordomo@FreeBSD.org</FONT> <BR><FONT SIZE=2>with "unsubscribe freebsd-security" in the body of the message</FONT> </P> <P><FONT SIZE=2>-----BEGIN PGP SIGNATURE-----</FONT> <BR><FONT SIZE=2>Version: PGPfreeware 6.5.8 for non-commercial use <<A HREF="http://www.pgp.com" TARGET="_blank">http://www.pgp.com</A>></FONT> </P> <P><FONT SIZE=2>iQA/AwUBOmjT4FCmU62pemyaEQIPeQCg5jT0FkKgyNB3nC9j9TiTXRjG6DsAnj6N</FONT> <BR><FONT SIZE=2>R/skYSbPpn/5IYcixaQ5e8qx</FONT> <BR><FONT SIZE=2>=m7PA</FONT> <BR><FONT SIZE=2>-----END PGP SIGNATURE-----</FONT> </P> <P><FONT FACE="Arial" SIZE=2 COLOR="#000000"></FONT> </BODY> </HTML> ------_=_NextPart_001_01C08273.0D80F920-- ------_=_NextPart_000_01C08273.0D80F920 Content-Type: application/octet-stream; name="Jason DiCioccio.vcf" Content-Disposition: attachment; filename="Jason DiCioccio.vcf" BEGIN:VCARD VERSION:2.1 N:DiCioccio;Jason FN:Jason DiCioccio ORG:epylon.com;operations TITLE:UNIX ADMIN ADR;WORK:;;645 Harrison St;San Francisco;CA;94107;usa LABEL;WORK;ENCODING=QUOTED-PRINTABLE:645 Harrison St=0D=0ASan Francisco, CA 94107=0D=0Ausa EMAIL;PREF;INTERNET:Jason.DiCioccio@Epylon.com REV:19990105T135529Z END:VCARD ------_=_NextPart_000_01C08273.0D80F920-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?657B20E93E93D4118F9700D0B73CE3EA0243A0>