Great Circle Associates Firewalls
(April 1998)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Linux as a serious firewall
From: Bernd Eckenfels <lists @ lina . inka . de>
Date: Wed, 15 Apr 1998 21:54:00 +0200
To: Steve Pearse <steve @ gas . co . uk>, firewalls @ greatcircle . com
In-reply-to: <3E60782BD6C5D111ADD100805F8B824E81C1 @ staines-ex01 . trading . centrica . com>; from Steve Pearse on Wed, Apr 15, 1998 at 01:14:58PM +0100
References: <3E60782BD6C5D111ADD100805F8B824E81C1 @ staines-ex01 . trading . centrica . com>

Hello,

On Wed, Apr 15, 1998 at 01:14:58PM +0100, Steve Pearse wrote:
> What do the panel think of Linux, would you seriously use it as a
> firewall in a commercial environment ?

This does completely depend on what you except from the Linux Box in a
Firewall Installation.

You get:
--------
IP Packet Filter, Masquerading, NAT, Port Rederiction
Thight, pretty Secure System with Sources
Some Applications for Proxy/Serving like Squid, BIND, anon-ftp
VPN from CIPE or IPSec or ssh
SSL Support, including a CA
Store+Forward Email Relaying
Some Basic Tools for (transparent) Application Level Proxies (not realy 
free is the TIS Toolkit)

You don't get: (at least not ready for prime time yet)
------------------------------------------------------
Turnkey Solution (I dont count Watchguard as a Linux System, since you lost
all the shell flexibility)
E-Mail Virus Protection
Well Known Vendor Support
NT
Integration into Netware or NT Domains
A complete System with Admin console

For a small to mid-ramge Network one should realy think if Linux is a cheap
Solution. Its surely is a good and flexible one.

Greetings
Bernd
-- 
  (OO)      -- Bernd_Eckenfels @
 Wendelinusstrasse39 .
 76646Bruchsal .
 de --
 ( .. )  ecki @
 {inka .
 de,linux.de,debian.org} http://home.pages.de/~eckes/
  o--o     *plush*  2048/93600EFD  eckes @
 irc  +497257930613  BE5-RIPE
(O____O)       If privacy is outlawed only Outlaws have privacy


References:
Indexed By Date Previous: Re: [FW1] SNMP agent
From: "Santi Ribas - Brown's Operating System Services" <santi @ browns . co . uk>
Next: Re: Watchguard Security Systems
From: Otterboy <jong @ watchguard . com>
Indexed By Thread Previous: Re: Linux as a serious firewall
From: Bennett Todd <bet @ mordor . net>
Next: Re: Linux as a serious firewall
From: Clyde Williamson <clydew @ ee . net>

Google
 
Search Internet Search www.greatcircle.com