Security Basics mailing list archives

Re: Linux firewall in Bridged mode


From: "Francisco Medina Lopez" <paco.medina () gmail com>
Date: Tue, 21 Feb 2006 12:01:33 -0600

hi

For this particular type of firewall, i think is better option an openbsd box.

http://www.openbsd.org/faq/faq6.html#Bridge




On 2/15/06, Shain Singh <Shain.Singh () aapt com au> wrote:
Hi,

I have been trying to find some decent documentation on this to no avail as
yet. Is anyone able to give me the pro/cons of a firewall in bridged mode?
Perhaps situations where it would be more useful, etc?

Ideally I am looking to setup a situation where the DMZ will be public IP
addresses and I don't want to implement NATing either. Is running iptables
with a bridged mode NIC able to process rules faster than in "normal routed"
modem configurations with the same types of filtering and so forth?

Please let me know if I need to explain further and thanks in advance.

--
Shaineel Singh
MakePeace Media LTD

http://mpm.org.au/shsingh


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: