Shachar Shemesh Wrote:
[snip]
> In order to configure
> a firewall, any firewall, you need to really understand what are the
threats
> you are facing, and how the firewall you are configuring is meant to help
> you with defending against them. I know, to date, of no product that does
> not require configuration in order to work.
>
That's not entirely correct. There is an excellent firewall-generating
application called mason, that generates ipchains/ipfwadm scripts
automatically, by 'learning' the current network communication. I'm not
trying to claim it's as good as an ipchains rules a good administrator
writes from scratch, and I wouldn't dream of using that in a commercial
environment, but for home users it's more than enough to build a good
firewall script that actually *works*. I'd also recommend experienced
network administrators to take a look at this unique application, since it's
definitely an interesting concept.
Mason is available through the usual channels (freshmeat, etc), and there's
a review about it on SecuriTeam.com:
http://www.securiteam.com/tools/Mason_-_Automatic_firewall_builder.html
- Aviram
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
