Re: Linux firewall options

[Joseph S D Yao <jsdy () cospo osis gov>]

On Wed, Jan 12, 2000 at 09:05:00AM +0800, Mayne, Peter wrote:
> Given Linux (say RedHat 6.0 or greater) as a base, what options are
> available to build firewalls? Is there a "Linux firewalls" site somewhere?
>
> ipchains is an obvious place to start for basic packet filtering
> functionality, but I'd prefer something more substantial. I could use Apache
> or Squid (depending on circumstances) as a Web proxy, for instance.
>
> I don't think FWTK can be used in a commercial environment because of the
> license restrictions. Is there something similar out there that is otherwise
> usable?

I know that there are such sites out there.  I don't have them at my
fingertips, though, and I'm sure that there are others that do.

Many commercial sites do use FWTK.  It is a firewall toolkit, though,
and not a firewall.  IIRC, the license prohibits commercial
re-distribution, not commercial use.

Many other sites use ipchains.  Packet filtering only makes me uneasy,
tough.

Apache, Squid, BIND, and Sendmail can all be used as proxies, although
again the sheer complexity of code in, specifically, sendmail may make
it less desirable as a proxy.

-- 
Joe Yao                         jsdy () cospo osis gov - Joseph S. D. Yao
COSPO/OSIS Computer Support                                     EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.