Re: IPtables versus Tcp_wrapper

[Adam Garside <Adam.Garside () CPCC EDU>]

> In any case, are we in agreement that given the choice of one or the
> other, the preferred method would be iptables as it drops packets?


Given the choice of one or the other, I would use iptables. I still  
believe the use of both is preferrable as tcpwrappers provides an  
independant layer of security in case a kernel bug allows the firewall  
policy to be bypassed.

Also, as mentioned in a previous post, I second the use of OSSEC as a  
good, lightweight HIDS.

Adam