From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Krish Ahya" Subject: Question Date: Fri, 21 Jun 2002 12:33:15 -0500 Sender: netfilter-admin@lists.samba.org Message-ID: <004001c21949$b966bc20$0201a8c0@power> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_003D_01C2191F.D05B2530" Return-path: Errors-To: netfilter-admin@lists.samba.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.samba.org This is a multi-part message in MIME format. ------=_NextPart_000_003D_01C2191F.D05B2530 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi all, I was just wondering, is Netfilter as good as Cisco's PIX and = Checkpoint's Firewall-1, if not better? Also I'm wondering say if I have a dmz and allow people to come into a = server on port 80, will netfilter inspect the packet on all 7 layers of = the OSI model and make sure that it is actually a http packet and = following the rules and protocol specifications of http? Sorta like = checkpoints INSPECT module. Thanks. - Krish ~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~ I have not failed 10,000 times, I have sucessfully found 10,000 ways = that won't work." -- Thomas A. Edison ------=_NextPart_000_003D_01C2191F.D05B2530 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi all,
 
I was just wondering, is Netfilter as = good as=20 Cisco's PIX and Checkpoint's Firewall-1, if not better?
 
Also I'm wondering say if I have a dmz = and allow=20 people to come into a server on port 80, will netfilter inspect the = packet on=20 all 7 layers of the OSI model and make sure that it is actually a http = packet=20 and following the rules and protocol specifications of http? Sorta like=20 checkpoints INSPECT module.
 
Thanks.
 
- Krish
~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
I have not=20 failed 10,000 times, I have sucessfully found 10,000 ways that won't = work." --=20 Thomas A. Edison
------=_NextPart_000_003D_01C2191F.D05B2530--