Re: [SLE] Firewall 2.0 restart in ip-up - further

Try the idea of the firewall being built into your network / cable modem card / box and updatable / changeable only from secure IP's either locally or your host. Manufacturer for the card? try Eichon. csijon ----------

From: Warrl To: Steven T. Hatton Cc: suse-linux-english Subject: Re: [SLE] Firewall 2.0 restart in ip-up? Date: Monday, 13 March 2000 7:23

...

I too am running at home. When we finally get fixed IP addresses from BA, I hope to set up a proxy that will allow selected communication between my systems and the outside world. I burned too much time on getting this thing running as it currently does, for me to go off and start tinkering with it right now. This subject of firewalls and proxies is both interesting and important. I actually see a day when each computer will stand up to internet exposure without the need for firewalls.

At that point, every machine will be its own firewall. Far from having gotten rid of them, we will have proliferated them.

Running the firewall on a separate dedicated machine serves at least five purposes, ONE of which we can reasonably hope will someday go away.

1. It lets us run inherently insecure systems (e.g. Windows 95) with acceptable security. This, we can hope, will someday become a non-issue.

2. It lets us put the processing burden of security on ONE machine.

3. It lets us run insecurely CONFIGURED systems with acceptable security. This is an important point. Not everyone is intellectually or emotionally prepared to deal with a securely-configured computer.

4. It gives us a single point of control for who is allowed to connect remotely, and from where. This also is an important point, for some people (mostly companies and government, not individuals).

5. As securiity flaws are discovered, it allows us to apply the emergency patches to only a few systems, rather than every system on our network (over 5,000 systems at my employer).

-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com

Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/