Re: What is more secure?

[Devdas Bhagat <devdas () dvb homelinux org>]

On 28/02/05 15:24 +0100, Harry de Grote wrote:
<snip>
> if a firewall only forwards ports, it is really hard to get hacked through 
> that port... i would give all the ip;s to the openbsd firewall

Why? An unpatched IIS server is still an unpatched IIS server on port
80, whether the port is just being forwarded or the IP is just on the
server. I see no benefits to either usage of a packet filter, which,
IMHO, is a good way of noise reduction for your real firewall. 

If this is only a webserver, how about using Squid/Apache as a reverse
proxy on the OpenBSD box?

Devdas Bhagat