Home page logo

basics logo Security Basics mailing list archives

Re: IPF/IPTable/??
From: Brad Arlt <arlt () cpsc ucalgary ca>
Date: Thu, 28 Nov 2002 15:40:29 -0700

On Thu, Nov 28, 2002 at 06:02:42AM +0900, ALBEE,RUSSELL. S FC2 (CV63 CS5) wrote:
Which *NIX firewall software is the best to use in terms of sercurity and
reliability?  IPF?  IPChains?  IPTables?

I consider Chains, Table, and Filter en par for stability.

Chains might be a little more stable, but how many 9s does one really
need?  Chains doesn't protect your network as well as Tables, so while
IPChains might keep your firewall running longer.  It might not keep
your network running longer, which is after all what your firewall is
supposed to do.

If you really mean "IPF" (circa Linux 2.0 kernel), and not IP Filters,
doen't use it.

The speed, flexablity, and statefulness of IP Tables (netfilter), make
it the best choice.

If you don't know what I am talking about when I say a 9, then you
want IPTables.  And you want to read more about all three so you can
an informed decision on the merits of each, rather than the
preferences of the masses.
   __o          Bradley Arlt                    Security Team Lead
 _ \<_          arlt () cpsc ucalgary ca                University Of Calgary
(_)/(_)         I should be biking right now.   Computer Science

  By Date           By Thread  

Current thread:
  • IPF/IPTable/?? ALBEE,RUSSELL. S FC2 (CV63 CS5) (Nov 28)
    • Re: IPF/IPTable/?? Brad Arlt (Nov 28)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]