Linux Firewalls Post: 7208

Sponsored Content

Top Forums UNIX for Advanced & Expert Users Linux Firewalls Post 7208 by mstevenson on Thursday 20th of September 2001 07:20:53 PM

09-20-2001

Registered User

Linux Firewalls

I've been considering switching my companies production firewall from FreeBSD and OpenBSD to Linux. The reason being is having so many different flavors of Unix on our production network from FreeBSD, OpenBSD, Solaris, and Linux makes things more difficult to manage from a standardized perspective. I really like OpenBSD firewalls. The os is clean, the code is tight, very small, and very secure. But having one flavor of Unix (namely Linux) would make things a lot simpler to manage. I've also been considering other firewalls from Cisco and Checkpoint (I think I'll stay away from Raptor). I wanted to know everyones opinions about using Linux for a commercial firewall in a corporate/production environment. If anyone out there uses it, has comments, suggestions, or bad experiences, I could really use the input from other admins. Thanks.

mstevenson

View Public Profile for mstevenson

Find all posts by mstevenson

5 More Discussions You Might Find Interesting

1. IP Networking

Halted Firewalls by Mike Murray

Secure packet filtering on high-bandwidths fw/rtr for large business tasks. Has anyone tried this concept on openbsd? The article is posted at www.sysadminmag.com on page 27. January 2002 issue. I believe Mike has hit upon something that can be applied in the field today and prevent fw...

2. Cybersecurity

firewalls and proxys

what can I use to find out whether a computer has a firewall or proxy??? What can I use do erase it?

3. UNIX for Dummies Questions & Answers

Firewalls and other security measures...

One day, while using my PC with Windows XP, my router just stopped working. So, for the ability to connect to the web at that moment, I connected directly to the cable modem without my router. I noticed immediately that people were trying to hack into my computer because my personal firewall would...

4. UNIX for Advanced & Expert Users

Firewalls

Hi, I was doing abit of reading on firewalls when this question came up. Is there any command which sets up a firewall that will only allow packets through if they come from a port number less than 1024? How about a command which allows packets through if they are destined for a port...

5. Cybersecurity

Firewalls and cryptography

As we know, firewall is designed to keep unauthorized outsiders from tampering with a computer system or network. We don't talk about computer security without cryptography. In this case, may I know,How does cryptographic protection (at the TCP/IP layers or at the application layer) affect a...

LEARN ABOUT DEBIAN

arno-fwfilter

ARNO_FWFILTER(1)														  ARNO_FWFILTER(1)

NAME

       arno-fwfilter - a filter script to make iptables firewall logs more readable for humans

SYNOPSIS

       arno-fwfilter [OPTIONS]

DESCRIPTION

       arno-fwfilter is a pipe filter script to make the firewall-log better readable. Some usage examples are:

       Static firewall log filtering:
	      arno-fwfilter < logfile

       Realtime firewall logging on tty10:
	      tail --follow <logfile> | arno-fwfilter >/dev/tty10 &

OPTIONS

       --help, -h
	      Print the available options.

       --html-output, -o
	      Use basic HTML to format the output

       --no-locations, -l
	      Disable to (try to) obtain the IP's geographical location. By default, http://www.hostip.info/ is visited to get this information.

       --no-colors, -c
	      Disable the use of colors in the output.

       --single-line, -s
	      Put all information about an event in a single line

SEE ALSO

       iptables(8), arno-iptables-firewall(8)

       The http://rocky.eld.leidenuniv.nl/ web site.

AUTHOR

       arno-fwfilter was written by Arno van Amersfoort <arnova@rocky.eld.leidenuniv.nl>.

       This manual page was written by Michael Hanke <michael.hanke@gmail.com>, for the Debian project (but may be used by others).

Michael Hanke							  September 2005						  ARNO_FWFILTER(1)