Great Circle Associates Firewalls
(June 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Whats the wrap on wrappers
From: Marcus J Ranum <mjr @ tis . com>
Date: Thu, 2 Jun 94 21:55:24 EDT
To: aj @ te-cats . COM, firewalls @ GreatCircle . COM

>I installed the Venema wrappers before getting
>fwtk, but I am now wondering if I should
>abandon the first for the fwtk wrappers.
>
>My main concerns are validating users and logging
>access.

	The Firewall Toolkit wrapper ("netacl")
doesn't do anything to authenticate users. I'm not
sure that Wietse's tcp wrappers do either, unless
you're mistaking ident for authentication.

	If you want to authenticate stuff like
incoming telnet/rlogin/ftp, using handheld calculators
or whatever, then the toolkit's proxies are a good way
to go. If what you're looking for is a tcp wrapper with
logging, they're more or less the same kind of thing --
the TIS version is more minimalist and less functional,
which I consider a feature.

mjr.

Indexed By Date Previous: Re: Cisco software update?
From: smb @ research . att . com
Next: Re: Cisco software update? (fwd)
From: amolitor @ anubis . network . com (Andrew Molitor)
Indexed By Thread Previous: Whats the wrap on wrappers
From: aj @ te-cats . COM (A. J. Alfieri)
Next: Re: Whats the wrap on wrappers
From: aj @ te-cats . COM (A. J. Alfieri)

Google
 
Search Internet Search www.greatcircle.com