Re: Recommended Firewalls



According to Chris Lale,
Clyde Wilson wrote:

I'm on Debian Sarge 3.1 r 1. Can anyone recommend an easy but fairly
good firewall?
Thanks for your time!

If you are talking about a personal firewall for your PC, have alook at
...

If you are talking about hardware firewall, most "broadband
router" devices provide DHCP/NAT which is adequate for most
home users. An unroutable IP address is provided to each
internal machine, and incoming packets are blocked unless they
are in response to a transaction initiated from inside.

These devices don't prevent spyware/viruses coming into machines
with stupid operating systems via stupid browsers accessing
hostile websites or stupid operating systems with e-mail clients
that auto-open hostile attachments, but that's a different matter
entirely- firewalls don't generally fix these issues.

I guess you should post more about what you are trying to
acheive.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx



Relevant Pages

  • Re: Recommended Firewalls
    ... If you are talking about hardware firewall, ... with stupid operating systems via stupid browsers ... with a subject of "unsubscribe". ... Trouble? ...
    (Debian-User)
  • Re: Recommended Firewalls
    ... Good advice Anthony. ... If you are talking about hardware firewall, ... with stupid operating systems via stupid browsers ... with a subject of "unsubscribe". ...
    (Debian-User)
  • Re: Recommended Firewalls
    ... When I run "shieldsup" at grc.com it says my firewall ... with stupid operating systems via stupid browsers ... with a subject of "unsubscribe". ... Trouble? ...
    (Debian-User)
  • Re: VNC client/server combo doing VNC over HTTP
    ... Both Ultra@VNC and RealVNC Personal Edition offer a version that allows access through a web browser on the client side, specifically to be more firewall-friendly; what are they doing if they are not putting VNC over HTTP? ... Thanks for the suggestion, I'll try it right away, but I don't expect it to work as I expect I'll find the firewall is not configured to allow SSH going out of the network to the internet any more than it would allow incoming SSH ... 2000 and comms between the two can be HTTP or better HTTPS over ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • RE: Ethernet & DHCP Fails on Cable Modem to Internet
    ... I disabled the firewall for testing purposes before ... > blocking the DHCP ports, ... >> Do you Yahoo!? ...
    (RedHat)