Re: AS/400 as a web server

[mcrump@xxxxxxxxxxxxxx]

>> I'm no expert by any stretch in the area of firewalls but we like what we
>>hear
>> other people are saying about the CISCO PIX 520...........all flames will
>>be
>> ignored since I am ignorant.....

>400 people are so anti-PC.

Anti-PC?  Naw.  I live and die by them.  Our existing firewall is based on
a little PC.  It has been unstable, has a few holes, and absolutely
can't handle VPN.  So we made a mistake.  Not necessarily the
fault of a PC based firewall.

I personally want a firewall that's supported and integrates into our
future router environment (CISCO).  I'll probably take a look
at your ideas but at a starting price of $5,000 the PIX doesn't seem
to be an expensive solution.

>Purchase a little PC.  Put two NICs in it.  It doesn't even need a full-time
>monitor or keyboard.
>Install OpenBSD.  Its focus is security.  It's free.
>http://www.openbsd.org/
>Learn ipf (IP Filter).  Stateful firewall software.  Again, free.
>http://www.obfuscation.org/ipf/
>Build a deny-by-default ipf ruleset.
>Bing.
>
>It will take time and a lot of reading, but it's an excellent and cheap
>solution.




Michael Crump
Ball-Foster Glass Container Co.









+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---