Re: Firewalls that generate new packets..

[jseymour () linxnet com (Jim Seymour)]

"Paul Melson" <pmelson () gmail com> wrote:
>
[snip]
>  A stateful firewall lets you think about
> your policy in terms of published services; "I let the whole Internet
> connect to this web server and that mail server, but nothing else.  And then
> whatever our people inside want to do."

But you can achieve that with nothing more than a "firewall router." My
good ol' Livingston IRX-211 can do that.  Even my (relatively)
inexpensive Netopia DSL routers can do that.  That was Marcus' point.

> Call it cynical.  Call it misguided.  Call it naive.  Call it stupid.  But
> it saves time and energy which translates to money.
[snip]

What you're telling me is that, if I don't want to go to the effort,
intellectually, time-wise and financially, to obtain and install a
proxying firewall, I need not bother with a firewall at all.  What
you're telling me is just skip the firewall entirely, and put together
a comprehensive set of "firewall router" packet filtering rules.

Right?

Jim
-- 
Note: My mail server employs *very* aggressive anti-spam
filtering.  If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at <http://jimsun.linxnet.com/contact/scform.php>.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards