Re: linux firewal question (newbie)

[David Lang <dlang () diginsite com>]

-----BEGIN PGP SIGNED MESSAGE-----



On Wed, 14 Oct 1998, Kevin T. Shivers wrote:

> Date: Wed, 14 Oct 1998 11:38:35 -0400
> From: Kevin T. Shivers <kshivers () tis com>
> To: HASSAN.KARIM () chase com
> Cc: Kevin Steves <Stevesk () sweden hp com>, Firewall-Wizards () nfr net
> Subject: Re: linux firewal question (newbie)
>
> At 06:25 PM 10/13/98 -0400, HASSAN.KARIM () chase com wrote:
<SNIP >
> > If Gauntlet were supported, could someone clue me in to a reason why
> > someone would use Linux w/ Gauntlet as opposed to BSDi w/ Gauntlet? If
> > you're looking for more apps.... although BSDi has a slew of apps....
> > should you really be using your firewall for anything other than network
> > firewalling?  Just a thought.
>
> The only thing I can see that would make it worthwhile is that patches and
> upgrades come out faster. This can be both good news and bad news, but for
> something like the latest buffer overflow or DoS attack, this can be good.
> BSDi's turn around time is OK, but the Linux project has patches out way
> before any commercial OS ever can or will.
>
> > If you are really interested in it... talk to the Gauntlet Product Manager
> > at NAI. Im sure he wants to hear about it.

One other reason to have linux/gauntlet rather then BSDI/Gauntlet is if
the admin has 20+ other linux boxes to administer but no other BSDI boxes
it is much easier to maintain the box. I have spoken to NAI and at this
point nobody is willing to admit to anything. (I even had one clueless
salesman tell me it would not be done becouse of the security problem
caused by having source code available, he obviously had not read the
white paper on his own web site talking about the advantages of a "crystal
box" approach :-)

David Lang


-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQEVAwUBNiTu2z7msCGEppcbAQGQcAf+JrdhAYpCI0fxFLAhF4S7mO0S+sUmEYW/
9HX5qBimeVodFuTy5MT2OPG76A9lluliOQaYLix7220sDX74wG7w9FQBpnZo7TPf
dHaR9Y/MllBCNOUGI6WK9JJuC7zT8H2lY/i0PM/j3JrTS3lHFu6bSnOwtoT8CGQN
Ew2N5vYq0gXS6MRXoSYELi97Ubl0Q45RlvRJHEUaIk9sxgvQ0nwF/dx7mneSJJ+n
YNiOtQlrOMpISCiJDlC0Qc0llaiZgK92QaQn6poYJN7tNKJjoiKSsLEMWn92g86I
ETpfxs+K41RVS8ukZ4utkFIrFYEecgRIBAYjrWi1VHzQA6Qwu39qVw==
=599z
-----END PGP SIGNATURE-----