[CLUE-Tech] LinkSys vs. spare PC

[Chris Ernst]

just a side note......

You can do ipsec on linux with FreeS/WAN (
http://www.xs4all.nl/~freeswan/ ).  I've set this up for my company to do a
vpn between our US, UK and Australian offices.   It is also fully compatable
with the ipsec implimentation in Win2K, so our salesmen can use it to make a
vpn connection to the office when they're on the road.

----- Original Message -----
From: "Nicholas Perez" <Nicholas_Perez at excite.com>
To: <clue-tech at clue.denver.co.us>
Sent: Saturday, April 14, 2001 10:45 AM
Subject: Re: [CLUE-Tech] LinkSys vs. spare PC


> IpSec is a cool feature but how many store bought ones can boast about
> filtering based soully on the content of the tcp flags set. NMAP scans
> sending custom packets (FIN, ACK, XMAS, NULL, UDP, IPraw, Windowing types
of
> scans) and if you are not prepared for that black hats could scan your
whole
> range of ports and report back what is possibly running with you even
> possibly knowing (since most store bought routers do not do logging of
> rejected/dropped packets). I still think IPTables is the best way to go if
> you want "true" security
>  just my $0.02
> On 13 Apr 2001 13:06:16 -0600, John wrote:
>
> >  I have the same box. It is a VERY good firewall, and it is configurable
> >  in the same way as a softwore firewall. It does a few things, like
> >  IpSec, which most software firewalls don't do. And it is MUCH easier to
> >  set up than a Linux-based firewall. Through the admin screen, you can
> >  filter out anything you want. If you want to see how well it really
> >  works, go to grc.com, and try the Shields Up test.
> >
> >  On 13 Apr 2001 18:27:33 -0600, Roger Frank wrote:
> >  > At MicroCenter they sell a box for about $100 that seems to
> >  > do everything that my spare PC with ClarkConnect does:
> >  > firewall, masquerading, etc.  I host www.linuxclassroom.org
> >  > on the PC in my basement and I thought I couldn't do that
> >  > behind an off-the shelf firewall.  But I installed a LinkSys
> >  > box between my brother's DSL and his two computers
> >  > and I discovered that I could have specific ports go through
> >  > to specific PCs on the inside network, so I could
> >  >
> >  > So my questions are these: is a PC with a Linux-based firewall
> >  > any better or any worse that a commercial product such as
> >  > the LinkSys?  Is there anything that would make me choose
> >  > one over the other?  Does the commercial box do everything
> >  > that the Linux PC does, and do it properly?
> >  >
> >  > ---
> >  > Roger Frank
> >  > _______________________________________________
> >  > CLUE-Tech mailing list
> >  > CLUE-Tech at clue.denver.co.us
> >  > http://clue.denver.co.us/mailman/listinfo/clue-tech
> >  >
> >
> >  _______________________________________________
> >  CLUE-Tech mailing list
> >  CLUE-Tech at clue.denver.co.us
> >  http://clue.denver.co.us/mailman/listinfo/clue-tech
>
>
>
>
>
> _______________________________________________________
> Send a cool gift with your E-Card
> http://www.bluemountain.com/giftcenter/
>
>
> _______________________________________________
> CLUE-Tech mailing list
> CLUE-Tech at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-tech