From owner-freebsd-security Fri Jan 19 15:54:11 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.epylon.com (sf-gw.epylon.com [63.93.9.98]) by hub.freebsd.org (Postfix) with ESMTP id 435DD37B401 for ; Fri, 19 Jan 2001 15:53:45 -0800 (PST) Received: by goofy.epylon.lan with Internet Mail Service (5.5.2653.19) id ; Fri, 19 Jan 2001 15:53:44 -0800 Message-ID: <657B20E93E93D4118F9700D0B73CE3EA0243A0@goofy.epylon.lan> From: Jason DiCioccio To: 'Jorge Peixoto Vasquez' , Sean Lutner Cc: security@freebsd.org Subject: RE: Failover firewalls with ipfw? Date: Fri, 19 Jan 2001 15:53:42 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: multipart/mixed; boundary="----_=_NextPart_000_01C08273.0D80F920" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_000_01C08273.0D80F920 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C08273.0D80F920" ------_=_NextPart_001_01C08273.0D80F920 Content-Type: text/plain; charset="iso-8859-1" -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Better than PIX? That's not a tough claim considering PIX has more holes in it than the Titanic :-) Just thought I'd throw my PIX gripe in there. - -JD- - ------- Jason DiCioccio Evil Genius Unix BOFH mailto:jasond@epylon.com 415-593-2761 Direct & Fax 415-593-2900 Main Epylon Corporation 645 Harrison Street, Suite 200 San Francisco, CA 94107 www.epylon.com BSD is for people who love Unix - Linux is for people who hate Microsoft - -----Original Message----- From: Jorge Peixoto Vasquez [mailto:jorge@aker.com.br] Sent: Friday, January 19, 2001 12:34 PM To: Sean Lutner Cc: security@freebsd.org Subject: Re: Failover firewalls with ipfw? Sean Lutner wrote: > I'm currently doing some research into firewalls, and which one(s) > would be right for my network. I'm considering everything from > Checkpoint-1, to Cisco Pix, to ipchains, to ipfw on FreeBSD. My > question is this. Does anyone out there know of any > utilities/code/addons I could use to > implement a failover pair of firewalls using ipfw and fbsd? Ideally > I'd like to do stateful failover, but having two machines always on > and a heartbeat solution might wirk as well. If anyone can offer > some pointers, it would be much appreciated. > Dear Mr. Sean Lutner, Our product does everything you want (except for stateful failover) and, altough not open-sourced, is much cheaper than these commercial solutions you want. Altough a little bit unknown outside Brazil, we have no fear of saying our product is at least in par with Checkpoint Fw1 or Pix, for instance. Please take a look at our web page and download a free (english, of course) evaluation version. If you prefer, please send me your address and I'll have our customer service dept mail you a CD ASAP. jOrge - -- Jorge Peixoto Vasquez, Elet. Eng. Aker Security Solutions Manufacturer of the FreeBSD/Linux Aker Firewall http://www.aker.com.br tel. +55 - 61 - 340 9083 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use iQA/AwUBOmjT4FCmU62pemyaEQIPeQCg5jT0FkKgyNB3nC9j9TiTXRjG6DsAnj6N R/skYSbPpn/5IYcixaQ5e8qx =m7PA -----END PGP SIGNATURE----- ------_=_NextPart_001_01C08273.0D80F920 Content-Type: text/html; charset="iso-8859-1" RE: Failover firewalls with ipfw?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Better than PIX? That's not a tough claim considering PIX has more
holes in it than the Titanic :-)

Just thought I'd throw my PIX gripe in there.

- -JD-


- -------
Jason DiCioccio
Evil Genius
Unix BOFH

mailto:jasond@epylon.com

415-593-2761          Direct & Fax
415-593-2900          Main

Epylon Corporation
645 Harrison Street, Suite 200
San Francisco, CA 94107
www.epylon.com

BSD is for people who love Unix -
Linux is for people who hate Microsoft


- -----Original Message-----
From: Jorge Peixoto Vasquez [mailto:jorge@aker.com.br]
Sent: Friday, January 19, 2001 12:34 PM
To: Sean Lutner
Cc: security@freebsd.org
Subject: Re: Failover firewalls with ipfw?


Sean Lutner wrote:
> I'm currently doing some research into firewalls, and which one(s)
> would be right for my network. I'm considering everything from
> Checkpoint-1, to Cisco Pix, to ipchains, to ipfw on FreeBSD. My
> question is this. Does anyone out there know of any
> utilities/code/addons I could use to
> implement a failover pair of firewalls using ipfw and fbsd? Ideally
> I'd like to do stateful failover, but having two machines always on
> and a heartbeat solution might wirk as well. If anyone can offer
> some pointers, it would be much appreciated.
>

Dear Mr. Sean Lutner,

Our product does everything you want (except for stateful failover)
and,
altough not open-sourced, is much cheaper than these commercial
solutions you want.

Altough a little bit unknown outside Brazil, we have no fear of
saying
our product is at least in par with Checkpoint Fw1 or Pix, for
instance.

Please take a look at our web page and download a free (english, of
course) evaluation version. If you prefer, please send me your
address
and I'll have our customer service dept mail you a CD ASAP.

jOrge
- --
Jorge Peixoto Vasquez, Elet. Eng.
Aker Security Solutions
Manufacturer of the FreeBSD/Linux Aker Firewall
http://www.aker.com.br
tel. +55 - 61 - 340 9083


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBOmjT4FCmU62pemyaEQIPeQCg5jT0FkKgyNB3nC9j9TiTXRjG6DsAnj6N
R/skYSbPpn/5IYcixaQ5e8qx
=m7PA
-----END PGP SIGNATURE-----

  ------_=_NextPart_001_01C08273.0D80F920-- ------_=_NextPart_000_01C08273.0D80F920 Content-Type: application/octet-stream; name="Jason DiCioccio.vcf" Content-Disposition: attachment; filename="Jason DiCioccio.vcf" BEGIN:VCARD VERSION:2.1 N:DiCioccio;Jason FN:Jason DiCioccio ORG:epylon.com;operations TITLE:UNIX ADMIN ADR;WORK:;;645 Harrison St;San Francisco;CA;94107;usa LABEL;WORK;ENCODING=QUOTED-PRINTABLE:645 Harrison St=0D=0ASan Francisco, CA 94107=0D=0Ausa EMAIL;PREF;INTERNET:Jason.DiCioccio@Epylon.com REV:19990105T135529Z END:VCARD ------_=_NextPart_000_01C08273.0D80F920-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message