> > YES. If you have a month or two full-time of an already-talented
> > time, you can install the TIS firewall toolkit and do about as
> good a job as
> > the commercial guys.
> A month or two? Surely you jest?
> We went from a wide-open network to a dual-homed bastion with the
> TIS fwtk
> and SOCKS over a weekend, with about a week of prep work by a
> summer intern,
> and maybe 20 hours of senior engineering time (we were without a
> sysadmin at
TIS installed their toolkit for us on the first machine, and I've since
installed it on 2 others - one from scratch - in about 2 days for the
first one and 2 hours for the second...