Re: 56k dial up on laptop 802.11G ?


If this post shows twice, you have my apology.

>>If the 54g can stop outbound by using iptables a packet filter and is
>>using
>>SPI, then it's a moot point. And it comes close to a FW appliance and
>>meets the FW definition but is not a FW appliance.
>
> So why is it not a "FW appliance"? It fits all the
> requirements...
>
> Except of course that it runs Linux and has software and
> functionality that Duane Arnold doesn't understand... :-)

That's because the router with it's packet filter works at level 3 and
level 4 of the OSI model. And if the router is using SPI, then SPI examines
the packets between the network layer of the OSI model to the Application
Layer of the OSI model to validate that the connection is valid and that
protocols are behaving as expected, it doesn't operate at the Application
Gateway level of the OSI model. It doesn't break the client/server model;
it doesn't have un-trusted and trusted zones.

Where as the FW appliance works at level 3 and 4 of the OSI model, examines
the packets between the network layer of the OSI model to the Application
Layer of the OSI model to validate that the connection is valid and that
protocols are behaving as expected, operates at the Application Gateway
level of the OSI model, breaks the client/server model, and has un-trusted
and trusted zones.

Duane :)


.

Relevant Pages

  • Re: 56k dial up on laptop 802.11G ?
    ... >>>If the 54g can stop outbound by using iptables a packet filter and is ... And if the router is using SPI, ... >the packets between the network layer of the OSI model to the Application ... "doesn't operate at the Application Gateway level of the ...
    (alt.internet.wireless)
  • Re: 56k dial up on laptop 802.11G ?
    ... >>>If the 54g can stop outbound by using iptables a packet filter and is ... >>>meets the FW definition but is not a FW appliance. ... >the packets between the network layer of the OSI model to the Application ...
    (alt.internet.wireless)
  • Re: 56k dial up on laptop 802.11G ?
    ... >>If the 54g can stop outbound by using iptables a packet filter and is ... >>appliance and meets the FW definition but is not a FW appliance. ... the packets between the network layer of the OSI model to the Application ...
    (alt.internet.wireless)