Re: tcpserver as an alternative to firewall?

[Robin S. Socha]

* Steven Rice <[EMAIL PROTECTED]> writes:

[...]

> Use a solid ipchains script for static firewalling, portsenty for
> dymic firewalling, and use tcpserver to control access once connected.

Using portsentry for dymic firewalling creates a nice SPOF for DoS
attacks. Running it on a firewall is... not very clever. ipchains are
kinda nice but nothing compared to ipfw (does "keep state" ring a
bell?)  but iptables are just around the corner, so...
-- 
Robin S. Socha <http://socha.net/>