There is not really a big difference between the hardware and software
firewalls (depending on implementation). The hardware versions (Cisco
PIX for example) is just a glorified PC w/Cisco's own OS (IOS) that has
the same kind of rule-based configuration. It does have special ASIC's
that can speed up rule processing but still is based on software. Once
comprimised, it will only let you through faster 8).
The problem is that people like to download little "personal firewalls"
that run under an already vulnerable OS like ANY of Microsoft's
products. Any firewall software running on top of any Microsoft product
is kinda like an oxymoron.
Some hardened versions of Linux and BSDI for example can provide more
protection that what Cisco has to offer.
We have many customers whose systems are comprimised all the time
utilizing a PIX. They run into the same problem as the "personal
firewall" bunch. Easy to understand, easy to install, easy to configure
= easy to comprimise.
Just my $0.02,
Shane
ps - The girl whom I traded a computer for a '93 Dak recently reneged
(sp?) on our deal as I have been attempting to get the title in my name.
She wants to give the computer back and charge me $500 for the truck.
Works for me 8). Especially since I sold the computer yesterday to a guy
close to her for $500. Since I have barely any money in the computer
(about $75). The Dak will still end up costing me next to nothing.
"Bernd D. Ratsch" wrote:
> There is no substitute for a hardware firewall. I use the software
> firewall as a backup, not the mainline defense.
>
> - Bernd
>
> -----Original Message-----
> From: owner-dakota-truck@buffnet.net
> [mailto:owner-dakota-truck@buffnet.net] On Behalf Of taylor9565
> Sent: Thursday, January 31, 2002 9:34 PM
> To: dakota-truck@buffnet.net
> Subject: DML: dml:re: online hackers
>
> Bernd-
> the norton software puts up a series of firewalls
> to hopefully discourge the SOB.
> Turned into a real pain in the @&& if you know what I mean.
> I 'm not sure of the technical part of the program, but it sure works
> great.
>
> Ron-
This archive was generated by hypermail 2b29 : Fri Jun 20 2003 - 12:03:57 EDT