I recently attented Brent Chapman's firewalls tutorial where Brent
focussed on bastian host firewalls while suggesting that dual-homed
hosts were the less preferred. Since I have to get a firewall system
up and running, and eventually setup two sites that will be doing a
lot of communicating back and forth, I want to set up something that's
both very secure and easy to configure and manage (taking to heart the
advice that the more complex the system the more difficult it is to
have any confidence in it).
With that in mind, can anyone in a kind of checklist format tick off
the pros and cons of a bastian host vs a dual-homed host. Whatever I
ultimately propose, I have to sell the particulars and I need to be able
to talk in terms of specific benefits.
-- Rob Tanner