Re: down to the core

[James LeClair <qwerty@eastlink.ca>]

On July 28, 2004 04:54 am, Harald Gröne wrote:


> You never now potential security holes. So it's a good idea to keep a
> firewall system as simple as possible:
>
> no modules, not initrd, no editor, no shell, just iptables and a firewall
> startup programm, period.
>
> In a non perfect world you need isdn, pppoe, syslog too.
>
> The whole system gets small enough to fit on a flash disk.
>
> Currently I'm searching for cheap hardware to build fanless firewall
> systems.
>


Could you provide some decent documentation/walkthrough on slimming down a 
Debian based router/firewall concistent with your recomendations?

Thanks