Re: vpn and pf

[Jason Dixon <jason@dixongroup.net>]

On Tue, 2004-02-03 at 14:48, Matteo Cavalleri wrote:
> i'm going to start working on a quite complex network and i'll work with
> a guy who has much more experience than me. one of the
> things we'll implement will be a quite complex firewall. since this guy
> has a lot of experience with linux he proposed to build the firewall
> with linux and iptable. since i know openbsd better than linux i
> proposed openbsd, explaining him what openbsd can do, how it does it,
> why it's better etc. he already agreed to build two test firewalls (one
> with linux and one with openbsd) and see which is better for our needs.
[snip]
> we'll need to do with ipsec/vpn and since i know nothing about these 
> topics, i don't know yet how to implement this thing on openbsd.

Let me get this straight.  You're assisting someone who knows Linux
firewalls and VPNs.  You know OpenBSD, but nothing about firewalls or
VPNs.  You're trying to convince him to use OpenBSD for a complex
configuration, without either of you having practical applicable
experience on it.  And he's actually humoring you?

Normally I'd pick OpenBSD for any such project;  however, use what you
KNOW.  Sheesh.

-- 
Jason Dixon, RHCE
DixonGroup Consulting
http://www.dixongroup.net