Re: firewalls

[<mshaw@mediapotential.com>]

On Tue, 12 Dec 2000, Roger Smith wrote:

> The major (or only significant) difference between ipfilter and
> commercial ones are GUI and policy based control. 

Not to get into a religious argument, but another major commercial
advantage would be application layer proxy (such as Raptor).  This can
provide a much greater level of protection, especially when forced to
'protect' things like IIS.

Don't get me wrong, I really like IPFilter--mainly for internal firewalls 
and situations where the primary role is 'inside out' access.. But I tend
to favor application proxies when an internal host is ultra sensitive
(provided a valid proxy exists.....)

-Mike