Re: [Security400] Firewalls

["Jim Franz" <franz400@xxxxxxxxxxxx>]

> There are also fire walls that run on windows systems.
<opinion>I would not recommend a Win firewall. MS is still a long ways
from securing it's operating system to the level of unix/linux. Had
2 more MS Security Bulletins today. If an attacker can't get thru
the firewall, then they attack the OS running the firewall. Thats
why firewall appliances are often recommended. Your firewall is
often the single point of entry, which can also make it a single point
of failure.
jim franz

----- Original Message -----
From: "John Ross" <jross-ml@netshare400.com>
To: <security400@midrange.com>
Sent: Wednesday, June 12, 2002 2:19 PM
Subject: Re: [Security400] Firewalls


> What you really need to do is look at what you have (and what it can do
for
> you) and what you need. You have a cable modem that does NAT, with
all/some
> incoming traffic going to your AS400. Now if you get a fire wall how is
> that going to change?
>
> Do you want VPN? How many locations/computers?
> Are you going to control incoming traffic by IP addresses?
> Do you need better logging then you have now?
>
> I would look at Linux (maybe NetBSD) because you could add on other stuff
> to the same box like snort or Net Saint. Red Hat has  a program that will
> run and update your Linux Red hat system. I got the first system free but
> it is $60.00 a year for basic. Note: It will not update the other packages
> you add.
>
> There are also fire walls that run on windows systems.
>
> John Ross
>
> At 12:22 PM 6/12/02 -0500, you wrote:
> >This is a multi-part message in MIME format.
> >--
> >[ Picked text/plain from multipart/alternative ]
> >What do you all recommend for a firewall? My company is looking into a
> >Watchguard Firebox. Bu t I have some other people suggesting to setup a
> >box with Open BSD. Please give me some advice.
> >
> >Justin Houchin
> >Programmer
> >ReliaTek, Inc
> >justin@reliatek.com
> >
> >--
>
> _______________________________________________
> This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
> To post a message email: Security400@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/security400
> or email: Security400-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/security400.
>
>