[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Sinus Firewall

On Mon, 27 Dec 1999 19:24:56 +0100, you wrote:
>On Mon, Dec 27, 1999 at 12:07:17PM -0500, Tim Sailer wrote:
>> I've been using it for a while. It's not real stable yet under the
>> 2.2 series kernels, but it works, and works well. It's really a 
>> full-state firewall for Linux, which has been missing for a long
>> time.
>The big question is where are its advantages over a set of ipchain rules
>that I create via vi or by using firewallct or gfcc or whatever is

ipchains is a stateless packet filter, sinus is a stateful packet
filter. For example, it's possible with Sinus to block incoming
connections from a single host if the last y seconds had more than x
SYN packets from that host.

Harald, *patsch* me if I'm wrong here ;)


-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber          |   " Questions are the         | Mailadresse im Header
Karlsruhe, Germany  |     Beginning of Wisdom "     | Fon: *49 721 966 32 15
Nordisch by Nature  | Lt. Worf, TNG "Rightful Heir" | Fax: *49 721 966 31 29

Reply to: