Great Circle Associates Firewalls
(August 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Boot frequency for firewalls
From: Bill Stout <stoutb @ pioneer-standard . com>
Date: Mon, 11 Aug 1997 09:19:19 -0700
To: firewalls @ greatcircle . com

At 09:23 AM 8/9/97 -0500, Peter da Silva wrote:
<snip>
>What sort of hokey UNIX variant have *you* been running? Solaris? Irix? I
>hear lots of pain coming from people stuck with those systems.

Can you say Solaris? I administered v2.2/2.3/2.4 systems (& NIS+).  An O.S.
that shipped with 17-odd patches, and tech support that wouldn't talk to you
unless you applied all relevant patches.

Some experience with Digital UNIX, HP-UX, and AIX held up the average.  A
firewall I had running fwtk then Gauntlet on SunOS v4.1.2 was fairly
bulletproof.  I designed some systems for Bectel way back when, who even
liked the reliability of DEC Ultrix enough to standardize on it for a short
while.  Some people are even happy using DEC SEAL v1.0 firewall on Ultrix.
Hell, I've even run real UNIX on Mainframe hardware, and that was rock-solid.

My curiosity is based on the O.S. and product combinations.  A firewall
being an untouched system should _theoretically_ be very stable.  Unstable
can result from DNS/sendmail problems, memory leaks, DOS vulnerabilities,
kernel patches(service packs), etc.

Bill Stout



Follow-Ups:
Indexed By Date Previous: Re: Port Scanner
From: ArkanoiD <ark @ paranoid . convey . ru>
Next: Re: Oracle Authentication on FW-1
From: Jerald Josephs <Jerald . Josephs @ Ebay . Sun . COM>
Indexed By Thread Previous: Re: Boot frequency for firewalls
From: "Paul D. Robertson" <proberts @ clark . net>
Next: Re: Boot frequency for firewalls
From: Bernd Eckenfels <lists @ lina . inka . de>

Google
 
Search Internet Search www.greatcircle.com