Re: Linux as a Firewall Platform

[peter @ baileynm . com (Peter da Silva)]

> > On a linux machine each hacker from the net, gained root privs. can change
> > it.

> If a hacker gains root on your firewall, haven't you, uhh, already lost?

That depends on what you let root do unmonitored. If root can't keep you from
logging to an immutable file and can't access devices (true on a BSD system
at "most secure" level) then they can't exploit your firewall without leaving
tracks of some kind. That's better than having them plant a tunnel for later
use.