RE: Open Source Personal Firewall?

["Petreski, Samuel" <spetreski () highpoint edu>]

Breno,

There was a very nice post from Paul on this list about free
distribution firewalls. The link is

http://www.distrowatch.com/dwres.php?resource=firewalls

There are about a dozen firewalls. The current one that I use at home is
IPCop found at http://www.ipcop.org and am very very pleased with it.
This firewall not only is very easy to configure, but it has a very user
friendly web interface with nice statistical data. It performs logging
as well as Intrusion Detection.

I would highly recommend this firewall to anyone. I have it currently
running on a Pentium 200 MMX with 96MB RAM and it runs greatly.

Samuel Petreski
spetreski () highpoint edu
High Point University
(336) 841-9290
 

-----Original Message-----
From: firewall-wizards-admin () honor icsalabs com
[mailto:firewall-wizards-admin () honor icsalabs com] On Behalf Of Breno
Jacinto
Sent: Sunday, December 07, 2003 10:30 PM
To: firewall-wizards () honor icsalabs com
Subject: [fw-wiz] Open Source Personal Firewall?

Hello fellows,

  I've been looking for an OSS Personal Firewall (PF) but googling for
one
  had no results. Of course we have great options for real firewalls (pf
  is pretty decent), but I'm looking for a solution for the grandma-like
user. Any take? 

  What about the commercial ones, such as Zonealarm, BlackIce etc.. any
  good recommendations (as well as bad ones)?

  After reading the 'Personal Firewall FAQ' (www.fefe.de/pffaq), which
  is way radical; a quote:

  "You can't improve security of an untrusted system by installing
another untrustworthy piece of software. 
  You don't have the source code for the operating system or for the new
piece of software, so it is impossible to 
  verify that it does anything at all, let alone improve security. In
the contrary, adding software increases the 
  system's complexity, increasing the probabilty for undetected bugs and
possible new security problems.

  A firewall is a computer security concept, not a piece of software.
Vendors selling you a piece of software (or 
  even a piece of hardware) under the label "firewall" are defrauding
you."

  Is there any sense on the argument above? I mean, people barely use
  any security layer in their systems, I believe a PF would be better
  than nothing (well it could stop stupid things such as Blaster from
  happenning). 

  
cheers,
  
// Breno Jacinto
// breno () freeunix com br
// Key fingerprint = A5C3 3B22 140D C973 6AC6  2D62 2318 B8FA 15F9 D3FC
// Never be afraid to try something new. Remember, amateurs built the
// ark; professionals built the Titanic. -- Anonymous

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards