RE: Firewall/Router: Dedicated Server or Appliance?

["Bryan S. Sampsel" <bsampsel () libertyactivist org>]

David Gillett wrote:
> > Much of the security really depends on what services/features
> > you're after.  If you only allow desktops to go out and no
> > inbound traffic, darn near anything can do the job...if it's
> > SPI capable.
>
>   In 1995, you could probably get away with allowing arbitrary
> outbound traffic and still believe your network was adequately
> secured.  That's just not good enough for the realities of 2005.

No arguments there.  Unfortunately, not everyone regulates their outbound
traffic.  The SOHO firewalls are quite guilty of this.

But most other products, whether Linux/BSD based or PIX or Netscreen, can
handle filtering in/out traffic.  But basic SPI allows you to initiate
allowed traffic without opening up the same hole inbound.

I think you misunderstood what I was getting at.  But that's ok...this
medium is terrible for communication.  ;)


Sincerely,

Bryan S. Sampsel
LibertyActivist.org