From owner-freebsd-isp  Tue Jun 29  4:19:10 1999
Delivered-To: freebsd-isp@freebsd.org
Received: from sinope.eclipse.net.uk (sinope.eclipse.net.uk [195.188.32.121])
	by hub.freebsd.org (Postfix) with ESMTP id 7AC7614C9A
	for <freebsd-isp@FreeBSD.ORG>; Tue, 29 Jun 1999 04:19:03 -0700 (PDT)
	(envelope-from stuart@eclipse.net.uk)
Received: from eclipse.net.uk (elara.eclipse.net.uk [195.188.32.31])
	by sinope.eclipse.net.uk (8.9.3/8.9.3) with ESMTP id MAA04824;
	Tue, 29 Jun 1999 12:18:52 +0100
Message-ID: <3778ABCB.73728DE2@eclipse.net.uk>
Date: Tue, 29 Jun 1999 12:19:39 +0100
From: Stuart Henderson <stuart@eclipse.net.uk>
Organization: Eclipse Networking Ltd.
X-Mailer: Mozilla 4.6 [en] (WinNT; U)
X-Accept-Language: en-GB
MIME-Version: 1.0
To: Martind <martind@iol.ie>
Cc: Hans-Christoph Steiner <hans@razorfish.com>,
	freebsd-isp@FreeBSD.ORG
Subject: Re: Using one FreeBSD box as router/firewall/vpn
References: <009901bec1a4$a15ee260$3d94cbc1@oemcomputer>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> Using Linux as a firewall is madness, FreeBSD is MUCH more secure, 

don't forget there are other choices too :)  FreeBSD security can
be hardened significantly by running with securelevel set and using
chflags schg to secure critical binaries. That way you have to
restart in single-user mode to make any alterations.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message