RE: COmpare Firewalls

["Joe Ippolito" <joe () joesnet com>]

So what I here you  saying is that MS Proxy uses an application-level packet
filter that is less secure than a kernel-level packet filter?  Can you site
an example and say why?  Wouldn't either one have to get in front of the OS
to filter incoming packets?

-----Original Message-----
From: owner-firewall-wizards () lists nfr net
[mailto:owner-firewall-wizards () lists nfr net]On Behalf Of Dameon D.
Welch
Sent: Tuesday, September 07, 1999 11:06 AM
To: joe () joesnet com
Cc: firewall-wizards () nfr net
Subject: Re: COmpare Firewalls


On Tue, Sep 07, 1999 at 09:06:20AM -0700, Joe Ippolito wrote:

> So you know of something that will protect an OS and is not an
application?
> Hmmmm?

Proper firewalls are a combination of user-level applications & kernel-level
packet filtering (stateful or otherwise). Any of the commercial firewalls
that run on NT should fit this bill.

-- PhoneBoy