[SunRescue] Router vs. PC with router/firewall software...

[Chris Byrne]

Once again, I find myself ins a "Me too" situation. The only reason I bother
is because I'm a professional security engineer, so hopefully my "me too"
might be a bit more useful.

I've set up literally thousands of firewalls, and I can safely say that
OpenBSD with IPFilter is the most secure freely available firewall. The
only compromises you make when going with it rather than a commercial firewall
are the prepackaged managability and compatability tools, and the lack of
integrated VPN capabilities, both of which are easily wrked around.


Chris Byrne

-- Original Message --

>On Fri, 5 Jan 2001, Mike Hebel wrote:
>
>> I don't know...how does Solaris compare to OpenBSD for security?
>
>Both can be either great or terrible.  OpenBSD comes more secure out of
>the box, but hardware support, poor threading and a very BSD-centric view
>of IP stack design keep me from using it as much as I could.
>
>Whatever you run, I recommend using IPfilter by Darren Reed.  I've been
>using it since the SunOS 4 days and it's been incredibly useful.
>
>-James
>
>_______________________________________________
>Rescue maillist  -  Rescue at sunhelp.org
>http://www.sunhelp.org/mailman/listinfo/rescue
>