[SunHELP] buy firewall router or use SB100 and ipfilter

[Yang, Chi-Tai]

F
--------------------------
Sent from my BlackBerry Wireless Handheld


----- Original Message -----
From: sunhelp-bounces at sunhelp.org <sunhelp-bounces at sunhelp.org>
To: The SunHELP List <sunhelp at sunhelp.org>
Sent: Thu Sep 10 19:12:57 2009
Subject: Re: [SunHELP] buy firewall router or use SB100 and ipfilter

>> btw you're probably also better off replacing the stock solaris
>> ipfilter with darren reed's latest, from
>> http://coombs.anu.edu.au/~avalon/ if you aren't already aware.
> 
> 
> Another [very good] option would be OpenBSD and pf.  That's what I use
> on my firewall, currently on a U5.
> 
> 

I'd echo the OpenBSD suggestion. I have a SS5 and an SS4 firewalling a 
cable connection and a DSL connection. The bandwidth limitation is not 
the firewall.

I found pf to be much easier and more intuitive than iptables on Linux, 
and easier than ipf on Solaris. Additionally, OBSD is just plain hard to 
hack.

Steve
_______________________________________________
SunHELP maillist  -  SunHELP at sunhelp.org
http://www.sunhelp.org/mailman/listinfo/sunhelp
________________________________________

This E-Mail (including any attachments) may contain privileged or confidential information.  It is intended only for the addressee(s) indicated above.

The sender does not waive any of its rights, privileges or other protections respecting this information.  

Any distribution, copying or other use of this E-Mail or the information it contains, by other than an intended recipient, is not sanctioned and is prohibited.

If you received this E-Mail in error, please delete it and advise the sender (by return E-Mail or otherwise) immediately. 

This E-Mail (including any attachments) has been scanned for viruses. 

It is believed to be free of any virus or other defect that might affect any computer system into which it is received and opened. 

However, it is the responsibility of the recipient to ensure that it is virus free. 

The sender accepts no responsibility for any loss or damage arising in any way from its use.

E-Mail received by or sent from RBC Capital Markets is subject to review by Supervisory personnel. 

Such communications are retained and may be produced to regulatory authorities or others with legal rights to the information.

IRS CIRCULAR 230 NOTICE:  TO COMPLY WITH U.S. TREASURY REGULATIONS, WE ADVISE YOU THAT ANY U.S. FEDERAL TAX ADVISE INCLUDED IN THIS COMMUNICATION IS NOT INTENDED OR WRITTEN TO BE USED, AND CANNOT BE USED, TO AVOID ANY U.S. FEDERAL TAX PENALTIES OR TO PROMOTE, MARKET, OR RECOMMEND TO ANOTHER PARTY ANY TRANSACTION OR MATTER.