Security Basics mailing list archives
Re: IPF/IPTable/??
From: Brad Arlt <arlt () cpsc ucalgary ca>
Date: Thu, 28 Nov 2002 15:40:29 -0700
On Thu, Nov 28, 2002 at 06:02:42AM +0900, ALBEE,RUSSELL. S FC2 (CV63 CS5) wrote:
Which *NIX firewall software is the best to use in terms of sercurity and reliability? IPF? IPChains? IPTables?
I consider Chains, Table, and Filter en par for stability. Chains might be a little more stable, but how many 9s does one really need? Chains doesn't protect your network as well as Tables, so while IPChains might keep your firewall running longer. It might not keep your network running longer, which is after all what your firewall is supposed to do. If you really mean "IPF" (circa Linux 2.0 kernel), and not IP Filters, doen't use it. The speed, flexablity, and statefulness of IP Tables (netfilter), make it the best choice. If you don't know what I am talking about when I say a 9, then you want IPTables. And you want to read more about all three so you can an informed decision on the merits of each, rather than the preferences of the masses. ----------------------------------------------------------------------- __o Bradley Arlt Security Team Lead _ \<_ arlt () cpsc ucalgary ca University Of Calgary (_)/(_) I should be biking right now. Computer Science
Current thread:
- IPF/IPTable/?? ALBEE,RUSSELL. S FC2 (CV63 CS5) (Nov 28)
- Re: IPF/IPTable/?? Brad Arlt (Nov 28)