Re: stealth firewalls

[Roelof JT Jonkman <roel () SiliconDefense com>]

Irwin,

Nothing really 'stealth' about it, it is really just doing bridging and
filtering at the same time. 'Stealth' with respect that a traceroute 
doesn't see it yes. 'Stealth' with respect to TTL yes, otherwise no
not stealth.

OpenBSD has a wonderfull combination of IPF/PF and bridging, build right into 
the kernel, quite powerfull. MAC address filtering, spanning tree etc. And
if you need to do more than that, you can route too.....
And PF/IPF is statefull, and allows you do quite fancy things with flags, so
'illegal' packets can trigger state entries and such.

BTW depending on how you configure IPF it is also possible to route without
decrementing the TTL of the packet.

IPF runs quite well on Sun Solaris btw.

IPF homepage: http://coombs.anu.edu.au/~avalon

                roel



_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards