Everhart,Glenn
From:	Dan Stromberg [strombrg@hydra.acs.uci.edu]
Sent:	Wednesday, March 25, 1998 3:21 PM
To:	Rodrigo Simon Coutinho
Cc:	ntsecurity@iss.net
Subject:	Re: [NTSEC] Linux Firewall

TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
Contact ntsecurity-owner@iss.net for help with any problems!
---------------------------------------------------------------------------

The ipfwadm that comes with linux is sufficient for most needs.

The free TIS firewall toolkit can handle some things ipfwadm can't,
including outgoing active ftp connections (despite the kind of odd
two-port design of ftp).

The TIS FWTK includes a smapd for SMTP, but there's a free alternative
(http://www.obtuse.com/smtpd.html) that sounds worth investigating.  We
had a problem with smap once, where it would lose mail if a filesystem
got completely filled up.  And there's always qmail, or running sendmail
non-root (note that sendmail has been thoroughly checked for security
holes recently, so it may not be the security problem it once was, so
even running it as root might be ok).

If you get stuck (not that likely, but it can happen), you might try one
of the many linux-related newsgroups or mailing lists.  There are LOTS
of helpful, knowledgeable people in the linux community.  And lots of
newbies, too.

Rodrigo Simon Coutinho wrote:
> 
> TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
> Contact ntsecurity-owner@iss.net for help with any problems!
> ---------------------------------------------------------------------------
> 
> Does anyone know a good firewall to run o linux?
> 
> Rodrigo