RE: [SLUG] The truth about ipchains

["Dave Kempe" <david@nospam.solutionsfirst.net>]

I have checked netmax. I wasn't very impressed with their way of doing
things, my biggest gripe being that the web based config didn't actually
read off the real config files, so things could get out of sync etc.

Thanks,

Dave

> -----Original Message-----
> From: owner-slug@nospam.newtreno.spectrum.com.au
> [mailto:owner-slug@nospam.newtreno.spectrum.com.au]On Behalf Of Grant Parnell
> Sent: Sunday, 18 June 2000 10:20 AM
> To: slug@nospam.slug.org.au
> Cc: Dave Kempe
> Subject: [SLUG] The truth about ipchains
>
>
> > Date: Sat, 17 Jun 2000 18:12:12 +1000
> > From: "Dave Kempe" <david@nospam.solutionsfirst.net>
> > Subject: [SLUG] The truth about ipchains
>
> If you want a saleable item you might want to check out the NetMax
> firewall product. It's essentially a RedHat distribution with a
> firewall configuration program. You could steal their sales pitch :-)
>
http://www.netmax.com


> Hey Sluggers,
>
> There seems to be many questions about ipchains on this list, and on
others
> I lurk on, is there any ratified configuration? Like has anyone said well
> this config is secure, this isn't, or any pointers about actual security
of
> ipchains? Most people want to be able to bend ipchains to allow a specific
> service thru or handle a unique combo of services.
>
> I need to be able to sell ipchains on its security vs other
> firewalls/firewall products. What are its advantages/disadvantages over
> other firewalls on any platform? Or to ask a very very open question, is
it
> enough security? Enough to withstand what over what? Like some firewalls
can
> resist DoS attacks, others can't etc. Is there a product that combines
with
> ipchains to harden it further? Is ipchains considered a "real" firewall?
Can
> i sell it as such? Has anyone had any experiences of ipchains vs other
> firewalls and seen which is better?
>
> I'm not a salesperson, just you have to sell if you want people to buy
your
> services. It seems to me that ipchains is enough security, perhaps
combined
> with portsentry if you want tighter security. I guess I just want some
more
> confidence in it as a firewall product.
>
> Thanks,
>
> David Kempe

---<GRiP>---
Grant Parnell gripz@nospam.linuxfreak.com (gparnell@nospam.bigpond.net.au)
Ph: 02-8701-4564 Mob: 0408-686-201 Web: http://www.poboxes.com/gripz
No Microsoft products were used in the production of this message.

--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to slug-request@nospam.slug.org.au with
unsubscribe in the text

--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to slug-request@nospam.slug.org.au with
unsubscribe in the text