Re: Firewalls [Tech]

On 2008-04-29, Technomage Hawke <TMH@xxxxxxxxxxxx> wrote:
[ DocJeff ] wrote:


I'm curous what you folks use as a firewall solution (business or
home). Why do you use it?

/Doc - on the hunt for a faster connection still
Defense in depth is my game.....

I use an OpenBSD firewall at the front gates to my house lan.

OpenBSD firewall? lol don't you mean "Packet Filter"?

Then another one (software firewall) at each machine in the house and most
especially one at the wireless router (this one has some special settings
so that the general public can get on, but then they'd have to pay my
paypal account if they want internet access).

also, since all traffic is logged here, I'll know who did what.
in the last 5 years, I have had only 1 single break-in and that was an
unsecured machine exposed directly to the net.

I also use an extensive hosts file at the DNS server to make sure no one can
get to the usual advert sites (like doubleclick.com). it cuts down on
malware. :)




--

evul

evul@xxxxxxxxxxxxxxxxxx
irc.exilenet.org
.

Relevant Pages

  • Re: Huge Live Linux Boot CDs
    ... This project allows you to set up a full featured OpenBSD firewall ... to do something about the security hole that allowed the initial attack. ...
    (Pen-Test)
  • RE: Advanced Firewall Techniques
    ... > I've successfully set up a home LAN with NAT, OpenBSD firewall, and ... > system maintenance, I know that all OS's require constant patches, but ... > attacks, DOS attacks and other ones I'm not mentiong? ... firewall machine or a bastion host. ...
    (Security-Basics)
  • Re: PoPToP on OpenBSD 3.4 firewall
    ... > the ZyXEL ADSL modem is connected to the OpenBSD firewall with a private ... > server for remote Windows clients to access our internal network. ...
    (comp.unix.bsd.openbsd.misc)
  • PoPToP on OpenBSD 3.4 firewall
    ... Currently we have an OpenBSD 3.4 firewall behind our ZyXEL ADSL modem, ... the ZyXEL ADSL modem is connected to the OpenBSD firewall with a private ... network with another private IP address range. ...
    (comp.unix.bsd.openbsd.misc)
  • Re: girl in destress!!
    ... >faster connection. ... My firewall was stopped and his took it's place. ... >that I'm doing anything wrong but it's his fault if he doesn't trust me ... Do you want to know how to get to the log files on his system? ...
    (comp.security.firewalls)