Re: Should I propose a Debian Firewall?

[Rene Mayrhofer <rene.mayrhofer@vianova.at>]

Kiss Csaba wrote:
> 
> Hi all,
> 
>  What type of your firewall ? Packet-filtering or proxy-based or
> statefull or  other
In principle it is open to any concept.
We use a combination of packet-filtering (standard linux kernel) and
proxies (e.g. for ftp which is a nightmare to packet-filter).

But if you use the sifi kernel module, you can have stateful inspection
as well (I hope that standard kernel 2.4.x will get a stateful
inspection module sometimes - maybe I will write one using the netfilter
API).

greets,
Rene