[rescue] RFA: firewall

[Brian Howe]

OpenBSD and PF. 

Much more secure and fewer headaches that Sunscreen or Redhat. 

The last version of RedHat that works on SPARC is too insecure and
uses an older kernel. Too hard to upgrade and update.

Debian would be an option, but there again you would need to upgrade
the kernel to be current.

If you use OpenBSD and PF, you can use this GUI for creating/managing
your filters:

http://www.fwbuilder.org/

Hope that helps

Brian


On Thu, 6 Jan 2005 14:27:46 -0500, Phil Stracchino
<alaric at caerllewys.net> wrote:
> I humbly request advice, opinions, whatever, from the Collective.  :)
> 
> The hardware: Ultra5, USIIi/333, 256M, 9.1G, three 10/100 interfaces
> (the built-in hme plus a dual EEPro100), didn't really pay attention to
> what framebuffer and can't say I particularly care.
> 
> The application: firewall between wired internal net, wireless DMZ, and
> DSL to the 'net.  Right now there'll only be one machine on the wired
> net and one on wireless, both running Win2K Pro, but real boxen running
> real OSen will be shipped out here later.
> 
> So:
>  - Solaris 9 and Sunscreen Lite (included with 9, iirc)?
>  - OpenBSD and PF?
>  - Something else?
> 
> What's your recommendations, and why?
> 
> --
>   ========== Fight Back!  It may not be just YOUR life at risk. ==========
>   alaric at caerllewys.net : phil-stracchino at earthlink.net : phil at novylen.net
>    phil stracchino : unix ronin : renaissance man : mystic zen biker geek
>      2000 CBR929RR, 1991 VFR750F3 (foully murdered), 1986 VF500F (sold)
>            Linux Now!  ...Friends don't let friends use Microsoft.
> _______________________________________________
> rescue list - http://www.sunhelp.org/mailman/listinfo/rescue
> 


-- 
Brian Howe
bwhowe_at_gmail_dot_com
-----------------
- press to test
- release to detonate
-----------------
The shortest distance between 
two puns is a straight line