-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Patrick Beart wrote:
> Having a PHYSICAL device sitting AHEAD of your server(s) is, >IMO, far superior to having the "software" sitting in that same >server box(-es). I really don't care what particular OS or coding is >used for the Firewall HARDWARE appliance. I only care that it's >running IPSec and isn't running on my server(s). > I want the big electronic "bouncer" sitting OUTSIDE my >virtual house, not in the foyer. I think you were misinterpreted because of your choice of terms. What I think you meant was that having an external firewall device is generally more secure than firewalling software running on the host you want to protect. Some posters (myself included, when I first read your message) thought you meant that somehow a 'hardware firewall' was more secure than a 'software firewall', which is meaningless. Cheers -d - -- David Talkington PGP key: http://www.prairienet.org/~dtalk/0xCA4C11AD.pgp -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 Comment: Made with pgp4pine 1.75-6 iQA/AwUBPJZH079BpdPKTBGtEQIReQCfczjMOUgv/dWlX00y7ivrWe6Yj7MAnjs4 ssQfgOvbugI7jAZcE8CaOJ4h =4X9Q -----END PGP SIGNATURE----- _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list