Re: non-IP firewalls

[Bernhard Schneck <Bernhard_Schneck () genua de>]

In message <AAzPxHryV7 () mpak convey ru> you write:
> Some people ask me if i can let ipx through firewalls i build - i answer no
> just because i can't filter and monitor it properly and thus it will break t
> -he
> security policy..

There's a package called Firewall/Plus which claims to be able to
filter lots of different protocols (I think they claimed about 600),
includung IPX, SNA and others.

> From what I read about it, it seems to be a packet filter starting
at the MAC layer and working it's way up through the ethernet frame.

I've never used or evaluated it yet, though.  If someone (independent
from the vendor, with a reputable name in the field :-) has, I'd sure
like to hear about her/his results.

\Bernhard.