[plug] Linux security

[Ian Kent]

Bret Busby wrote:

> Cannot ipchains and ipfwadm do all the stuff required for security of a linux
> computer?

Yes but it depends on your requirements and what you are trying to protect.

Most well setup firewalls use some form of reporting.

The question is - do you want to know when someone is scanning your firewall
trying to get in.

Another problem is that it is easy to get packet filters wrong accidentally.

Also, requirements often dictate that openings be made in the firewall for either
direct connections of for the use of other proxies.


--
   ,-._|\    Ian Kent
  /      \   Perth, Western Australia
  *_.--._/   E-mail: ian.kent at pobox.com
        v    Web: http://pobox.com/~ian.kent