firewall

Marco A. Ramos mramos at sanyoval.net
Mon Aug 1 20:08:01 UTC 2005


Woaa, the time past really fast.

You got me on that, I feel dumb.


OK, Lets move the question:

It has sense to spend time learning and updating OpenBSD just to use it as
Firewall server or It’s better invest that time on Linux?



-----Original Message-----
From: redhat-list-bounces at redhat.com
[mailto:redhat-list-bounces at redhat.com]On Behalf Of Jason Dixon
Sent: Monday, 01 August, 2005 11:16 AM
To: General Red Hat Linux discussion list
Subject: Re: firewall


On Aug 1, 2005, at 11:12 AM, Marco A. Ramos wrote:

> Talking about this topic, now and since 4 year ago we are using the
> firewall
> (IPF) in a OpenBSD servers to protect the net from Internet and
> Iptables to
> protect the inside servers, according with the information in that
> days

You're 3 years out of support.  You should be using 3.6 (or newer)
with PF.  IPF is a piece of shit (excuse my french).

> OpenBSD looks more secure than Linux

By default, yes.  Nevertheless, it's apples and oranges.  Either one
can be made *more* secure by a competent sysadmin.

> “Only one remote hole in the default install, in more than 8 years!”
> Publicity on www.openbsd.com
>
> But Linux it much powerfully then OpenBSD.

Care to elaborate?

> My point it’s to put on the table a discussion about the advantages
> between
> Iptables on Linux and IPF on OpenBSD.

Don't even think about using IPF in this discussion.  Feel free to
compare Linux netfilter/iptables and OpenBSD/PF.


--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net




--
redhat-list mailing list
unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list




More information about the redhat-list mailing list