Re: Still Help Needed: i want to make a firewall

[Mike Mentges <mike () mentges org>]

The best way to make a firewall with a win2k machine is to fdisk, format,
and install a *BSD or *nix on it ;-P Preferably OpenBSD. Windows is far
too insecure to be dependent upon for fire wall.
Just an educated professional opinion, we follow the rule to not allow any
Windows machines to be directly connected to an unprotected network. This
is the best way to configure your network, if you leave windows connected
to the network you are leaving yourself open for attacks. It is also much
easier to compile, install, configure and troubleshoot Snort on the above
mentioned machines. :-)

Hope this helps!

Mike Mentges


On Tue, 15 Apr 2003, Junaid wrote:

> i HAVE To work in windows platform preferrably win2k
> and ...
>
> i want to make a firewall for a network. say i have
> two interfaces (NICs) on a PC one connected to my
> private network and other to the internet. can i use
> libpcap/wpcap to capture all the packets and then
> filter all the packets according to some user defined
> rules and then drop the packets violating any rule
> while leting others go. currently i know that
> libpcap/wpcap can only be used to sniff packets but
> cannot block packets going into the IP stack of an OS.
> i want that i be able to block all the packets and let
> go (into the protocol stack) only the packets which
> donot violate any rules hence making a packet
> filtering firewall.
>
> can anyone tell me how to achieve this with pcap or
> with anything else.
>
> can i get the source code for hogwash for windows...?
>
> need an urgent reply please.
>
>
> __________________________________________________
> Do you Yahoo!?
> The New Yahoo! Search - Faster. Easier. Bingo
> http://search.yahoo.com
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users