RE: Re: Firewalls?

["Murgatroyd, Paul" <paul.murgatroyd@xxxxxxx>]

Thanks Mark

-----Original Message-----
From: Mark McCall [mailto:mark@xxxxxxx]
Sent: 24 September 2001 11:20
To: ukha_d@xxxxxxxSubject: Re: [ukha_d] Re: Firewalls?

www.e-smith.org

 

M.

 

 

----- Original Message -----

From: paul.murgatroyd@xxxxxxx

To: ukha_d@xxxxxxx

Sent: Monday, September 24, 2001 11:07 AM

Subject: [ukha_d] Re: Firewalls?

Where can I download e-smith?

Have they been taken over?

Thanks

Paul

--- In ukha_d@xxxxxxx, "steve" <steve@xxxxxxx> wrote:
> Not entirely true - if you use one of the firewall distro's. You
can have a firewall up in 4 mins, ok then 14. Look at e-smith, fli4l,
smoothwall etc.
>
> Steve.
>
> Linux
> Assuming you want to put a machine between you and the net or move
to the
> OS, Linux offers a cheap (as in free) way to setup a firewall. It
is the
> most complex of solutions since a default linux install is not
particularly
> secure. Some knowledge of the OS and a lot of reading to work out
what's
> what is required to create a suitable firewall machine although
newer
> distributions have tried to create an easier interface to do this.
Not
> recommended unless you know the OS or have a patient friend to
teach one or
> a trustworthy one to go in and set up for you. You would also need
to move
> the DUN connection to Linux and install IP Masquearding and Port
Forwarding
> to perform an ICS type sharing of the connection. It is suitable as
a
> firewall for a network. Could be configured from the host PC or
through a
> suitably secured telnet SSH1/2 shell to the host from a client.
>
>
> A hardware firewall is obviously the better bet in more secure
environments,
> but IME the NIS and previous AtGuard have been more thna enough for
my
> needs. Zone Alarm gets many recommendations but my personal
experience leads
> me to not concur with this recommendation. Out of those I have used
and
> tried, NIS is my winner. There were some others I tried briefly but
they
> either failed to install or had run time problems so I have ignored
them
> here.
>
> HTH
>
> Mark.
>
>
>
>