Re: firewall -- best practices

2003-02-20 Thread Paul Johnson
Please don't top post, it's difficult to read, and breaks readily quoting a conversation for other people. Your editor places the cursor at the top expecting you to edit from the top down, not just leave the full text of the original message at the end. On Thu, Feb 20, 2003 at 01:54:01PM +0100, W

Re: firewall -- best practices

2003-02-20 Thread Nathan E Norman
On Thu, Feb 20, 2003 at 01:54:01PM +0100, Willem-Jan Meijer wrote: [ please don't top post; it's ugly. Your quoting looks a little broken too but one rant per reply is enough ] >> On Thu, Feb 20, 2003 at 11:48:10AM +0100, Willem-Jan Meijer wrote: >>> I read this conversation, and now I have a qu

RE: firewall -- best practices

2003-02-20 Thread Willem-Jan Meijer
rspronkelijk bericht- Van: Paul Johnson [mailto:[EMAIL PROTECTED]] Verzonden: donderdag 20 februari 2003 12:33 Aan: Debian Onderwerp: Re: firewall -- best practices On Thu, Feb 20, 2003 at 11:48:10AM +0100, Willem-Jan Meijer wrote: > I read this conversation, and now I have a question. If I downl

Re: firewall -- best practices

2003-02-20 Thread Paul Johnson
On Thu, Feb 20, 2003 at 11:48:10AM +0100, Willem-Jan Meijer wrote: > I read this conversation, and now I have a question. If I download the > iso(s) and I want to use Gibraltar on my Debian server, does it overwrite my > existing installation? I want to try Gibraltar, but I don't want to lose my >

Re: firewall -- best practices

2003-02-20 Thread Paul Johnson
On Tue, Feb 18, 2003 at 08:28:50PM -0700, John Schmidt wrote: > 1. Is it best to not have the firewall doing anything else, i.e. acting > as a web and/or mail server, and instead use a different machine for > the mail server? Keeping the firewall box dedicated to just routing and filtering wi

RE: firewall -- best practices

2003-02-20 Thread Willem-Jan Meijer
mende en uitgaande e-mail worden gescand op virussen --> <-- All incoming and outgoing e-mail is scanned for virusses --> -Oorspronkelijk bericht- Van: Nathan E Norman [mailto:[EMAIL PROTECTED]] Verzonden: donderdag 20 februari 2003 10:46 Aan: [EMAIL PROTECTED] Onderwerp: Re:

Re: firewall -- best practices

2003-02-20 Thread Nathan E Norman
On Thu, Feb 20, 2003 at 02:54:10AM -0600, Will Trillich wrote: > anybody know of one of these downloadable firewall-on-iso gizmos > that are based on debian? http://www.gibraltar.at/index.php?product_gibraltar_download_eng -- Nathan Norman - Incanus Networking mailto:[EMAIL PROTECTED] The best

Re: firewall -- best practices

2003-02-20 Thread Will Trillich
On Wed, Feb 19, 2003 at 04:08:15PM +1100, Joyce, Matthew wrote: > I have been using ipCop on a P133 with dsl, no problems at > all, *very easy* to setup. (if the machine has a bootable cd > drive) i was using ipcop until i found out they mostly lifted code from smoothwall.org; so i tried smoothwal

Re: firewall -- best practices

2003-02-19 Thread Alvin Oga
hi ya -- lots of answers ... my preferences below .. On Tue, 18 Feb 2003, John Schmidt wrote: > Hi, > > I have a couple of old machines that I will be installing Debian on > them. I would like to dedicate one of the machines to a firewall, and > the other machine to a mail server. I have

RE: firewall -- best practices

2003-02-18 Thread Joyce, Matthew
> 2. Occasionally, I would like to ssh into my network from > work. Is it > best to only open up the port on the firewall or do some port > forwarding so that ssh connections automatically go to a different > (non-firewall) machine? I have been using ipCop on a P133 with dsl, no problems at

Re: firewall -- best practices

2003-02-18 Thread jereme
John Schmidt <[EMAIL PROTECTED]> writes: > I have a couple of old machines that I will be installing Debian on > them. I would like to dedicate one of the machines to a firewall, and > the other machine to a mail server [...] > 1. Is it best to not have the firewall doing anything else, i.e.