iptables script + δυνατότητες

[Άγγελος Οικονομόπουλος]

On Wednesday 16 October 2002 02:08, Alexandros Papadopoulos wrote:
> On Tuesday 15 October 2002 03:50, Άγγελος Οικονομόπουλος wrote:
> > giati ta en logw products einai auto akribws: ths plakas. (pragmatika
> > den
 mporw na katalabw se ti mporei na boh8hsei ena tetoiou eidous fw
> > ektos apo to na sou dwsei mia pseudais8hsh asfaleias - gia auth th
> > douleia kalutera einai ta arkoudakia). An pali esu eisai pepeismenos
> > oti xreiazesai auto to feature, tipota den se empodizei na ftia3eis ena
> > xrhsth
> > "netfilter_immunity", na tou dwseis ta executables pou 8eleis na
> > pernoun
 kai na prosarmoseis katallhla to firewall.
> >
> bah, poly inflexible lysh.

se ti se periorizei?

> Ta application level fw 8a mporousan na 
> leitourghsoun san distributed firewall (se application level) pisw apo
> ena 
 packet filtering firewall pou 8a einai mprosta apo olo to diktyo. 

gia poio logo na to kaneis auto? bazontas ena deutero, periorismeno, metro 
asfaleias pisw apo to pf fw den au3aneis th asfaleia tou diktiou

>
> > gegonos omws einai oti epikinduna einai ta packeta, oxi ta
> > programmata,
 akoma kai an o ekastote admin 8ewrei oti mporei na ta
> > empisteuetai. 
> >
> > > GNU-based συστήματος το firewalling και γι'αυτό πάει ο κόσμος και τα
> > > σκάει στη Cisco;
> > nai, giati ta cisco exoun auto to feature, swsta?
> Oxi, giayto kai yparxei to parapanw skeptiko.

poio skeptiko? oti to tiny personal fw (h opoiodhpote application level fw) 
exei nohma pisw apo cisco (h opoiodhpote pf fw)? pws to uposthrizeis auto 
(to "kalo einai na uparxei" den einai epixeirhma)?


-- 
Replace repetitive expressions by calls to a common function.
            - The Elements of Programming Style (Kernighan & Plaugher)