Printable View
Hello All
A new poll to gather data about the most favorite firewall used by the users at AO.
Please participate and do make a post about your choice in the thread.
Also to Relyt eagerly awaiting Firewall Recommendations - Number 7 !
Firewall Recommendations - Number 6
I normally use ipfw (iptables) under bsd. I think thats the most configurable and it being very cheap..lol.
On what BSD is iptables found and called ipfw ?Quote:
Originally posted here by webDEViL
I normally use ipfw (iptables) under bsd. I think thats the most configurable and it being very cheap..lol.
FreeBSD has IPFW built in to the the OS. I wonder if that is the OS he uses.
"FreeBSD has three different firewall packages built into the base system. They are: IPFILTER (also known as IPF), IPFIREWALL (also known as IPFW), and OpenBSD's PacketFilter (also known as PF)."
http://www.freebsd.org/doc/en_US.ISO...alls-apps.html
I am running FreeBSD on one of my systems, but I only use packet filtering. I still have alot to learn about my FreeBSD system, so I can't get into alot of detail about it's firewall packages. The only reason I was able to provide any insight to this subject is because I have recently been reading the FreeBSD Handbook.
using freesco.
very good.
Trend Micro Internet 2006
Easy to use and configure..has a Wi-Fi intrusion detection option.
;)
I use a Cisco 5505
I use Firestarter because of the features:
* Open Source software, available free of charge
* User friendly, easy to use, graphical interface
* A wizard walks you through setting up your firewall on your first time
* Suitable for use on desktops, servers and gateways
* Real-time firewall event monitor shows intrusion attempts as they happen
* Enables Internet connection sharing, optionally with DHCP service for the clients
* Allows you to define both inbound and outbound access policy
* Open or stealth ports, shaping your firewalling with just a few mouse clicks
* Enable port forwarding for your local network in just seconds
* Option to whitelist or blacklist traffic
* Real time firewall events view
* View active network connections, including any traffic routed through the firewall
* Advanced Linux kernel tuning features provide protection from flooding, broadcasting and spoofing
* Support for tuning ICMP parameters to stop Denial of Service (DoS) attacks
* Support for tuning ToS parameters to improve services for connected client computers
* Ability to hook up user defined scripts or rulesets before or after firewall activation
* Supports Linux Kernels 2.4 and 2.6
* Translations available for many languages (38 languages as of November 2004)
Other than that, it is what I am using right now.
freebsd all versions of it.Quote:
On what BSD is iptables found and called ipfw ?
I use that, cause I use bandwidth restriction too.
From FreeBSD Handbook Chapter 26 Firewalls
for information on iptables, try The netfilter.org "iptables" project: What is iptables?Quote:
FreeBSD has three different firewall packages built into the base system. They are: IPFILTER (also known as IPF), IPFIREWALL (also known as IPFW), and OpenBSD's PacketFilter (also known as PF).
Do you know what you are using?
whats that supposed to mean?Quote:
Do you know what you are using?
“I use @#$&^ Firewall – it's a gud 'n and it ain't ever let me down.” :)
Anyway...I'm of the mindset that names do not equate to shinola anymore, type selection should be based on particular need(s). Define your needs and what services you are willing to put on the line, support with layered defense, etc., etc. (Already tutorials on that....)
cheers
Obviously being subtle isn't working here.
From one of the links I provided:
Did you rewrite Netfilter and iptables for use on BSD? Iptables is for Linux, ipfw ( IPFIREWALL ) is one of the available firewalls on FreeBSD.Quote:
iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset.
------------------------
I am more in keeping with Relyt's comments in my actual practice.
I use firewalls on all my machines, ( including LAN ) even though I try to lock them down. My feeling is that if something does get onto one of them the firewalls may help prevent the spreading to others.
I use Netfilter ( iptables ) on all the linux machines. The perimeter firewall is a stripped down, locked down linux box. I configure them directly, writing rules by hand and don't use GUIs or helpers to configure them. ( why, because I understand it, can configure and customize it to exactly my needs, and it does what I want. )
I use PF on my BSD boxes.
The only one of the choices listed in the poll above which I use is Zone Alarm ( free version mostly ) on some windows machines. Why? Because it is easy for those that use those computers to understand it and use it properly.
I had problems with ZA years ago when XP first came out, switched to Tiny, then found "leakage" which I was uncomfortable with. Although I did notify the maintainers, by this time ZA was working well with XP so I switched back. Haven't tried Tiny since.
I also use the firewall that comes with PC-cillin Internet Security on a few windows boxes, but it is harder to use and set up so I have to watch who will be using the computers. ( If they don't understand it there is a good chance they will either misconfigure it, allow something through they did not intend to, or just get frustrated and shut it off. )
I agree with others in the thread on creating your own in *BSD or Linux (IPTables or PF).
It has allowed me to learn a great deal about how a firewall operates, how *BSD and Linux operate, and it was just interesting all around.
Hope that helped
toxic.influx
Cisco PIX
At work we use watchguard x700's as gateways and blink from eEye for desktops.
http://www.watchguard.com/products/core.asp
http://www.eeye.com/html/products/blink/index.html
The X700's are basically customized linux boxes, are extensible easily maintainable and offer several flavours of VPN...we use both branch office and Mobile user
blink provides desktops with application and system level softFireWalls as well as antispyware, antiphishing and "Protocol based intrusion prevention" which basically offers zero day protection
At home, a watchguard SOHO and an f-secure suite from my cable provider
btw..i thought it was interesting that all (i think) of the firewalls listed in the poll were software based...
personally(and professionally actually) I'd never rely on a single point of defence...multiple layers is what keeps the bad guys at bay (mostly)
I use a layered approach.........an external device and a piece of software on the machine.
Depends on the environment
MLF
Ditto. I use both hardware and software firewalls in layers. The software firewall I use the most is Ghostwall; simple and very effective.Quote:
Originally posted here by morganlefay
I use a layered approach.........an external device and a piece of software on the machine.
Depends on the environment
MLF
Good topic, though. Some firewalls I never heard of popping up here.
Joe
Both at home and work I used ipfw for a while, but now use a linux firewall with iptables, Iproute2 QoS and L7 filtering..
The Layer7 filtering combined with QoS and iptables allows for traffic shaping and filtering on protocol and much more (regex)..
Has anyone used Juniper's netscreen devices. I use quite a lot of them and i am quite happy with what they offer. I am intrested in what do you guys think of these devices.
Reason being it has heaps going for it
*Heaps of addons
*Bandwidth limiter
*It's Free
*Wireless Traffic Control via MAC and IP ADDY
*Content filtering
*Snort intrusion detection on all interfaces
*It's free :)
*Eay to setup
*makes use of old hardware
*Is also a transparent proxy
*Veeeeeeery Fast! even on old hardware
Keeps me happy
Home = Sonicwall TZ170 Wireless
Work = WatchGuard x700 Core
Cisco = Crappy throughput for VPN and Firewall, nice device just not a very big fan of cisco as far as firewall technology goes. Great Routers and Switches, but the PIX 501, 506, 515 are really not all that great, mostly set up as Packet Filtering with limited or no support for Application Layer Proxies. Although they do well for a edge device to drop packets before being filtered by a real firewall.
Dont mean to stir the pot, just putting in my 2cents
i think balckIce is more professional
but it ofen block myself...
haha..
Do any of these Windows firewalls even do anything? Don't half of them either have ad/spy-ware or vulnerabilities that, if left unpatched, probably pose a more significant threat than not even having a firewall in the first place?
Linux + iptables, or BSD + ipfilter.
Its the only thing I trust.
Yes, they do. I wouldn't try to clean and update a user's box without one. You might want to consider that there is a short term requirement and a long term one depending on the situation?Quote:
Do any of these Windows firewalls even do anything?
I have always found them effective against simple netbot type attacks whilst you are patching the OS and apps. :)
Hi all
I have used iptables in my server side and zonealarm at client side. iptables is cool to configure , so I use this at linux server. But in client side who use windows will be comfort to click and finish the setup so I think zonealarm is cool at this case and I prefer too to use zonealarm coz it is very much easy to setup and configure too.
I just want to clarify something, Cisco doesnt claim that the Pix is an application layer proxy or even any proxy for that matter. It has the ability to perform cut through proxying but that is about it. I have configured hundreds if not thousands of pixs from 501s to 535 and ASA 5510s to 5550s. I have seen all the vpns as well as any other feature perform exactly as the documentation indicated. I can't begin to recall how many fireboxs I have replaced with Pixs or ISR routers. Sonic wall firewalls are okay for the soho environment , but I have been replacing alot of them as well because the vpn client didnt have per user authentication. Even though I hold many advanced Cisco certs and work for a Gold Partner, I will tell you the best firewall hands down is a Netscreen.
I use IP Cop
Because of the Road Warrior Featers (VPN)
that can be installed. It also has a content filter,
Squid, and many other features...
It will work on any old computer you may
have around and it will work on the real cheep Dell.
All you need is 2 NIC cards and the ISO
www.ipcop.org
www.openvpn.se
hey i use zonealarm, whats the best firewall to use?
Uhm... are you kidding?Quote:
hey i use zonealarm, whats the best firewall to use?
I've resorted to Zone Alarm on this W2K laptop after trying a couple of different ones, but it can be a pain. Sygate was my fav, but it's outdated and no longer in development, so I've given up on it. On my XP laptop, I'm perfectly content with the Windows firewall. I don't use any firewall software on my desktop/server units (they're always behind a gateway).
It's hard to beat a dedicated firewall/gateway, even if it's a $50 router. All the better if it's IPcop, Smoothwall, ClarkConnect, or a custom unit.
Alphashield Hardware Firewall simple to install/setup and it blocks everything.
I use ISA Server 2004 and planning on using ISA Server 2006. If you use a Windows or even use any Windows Applications I would say it's a no brainer to have an ISA box somewhere on your network even if it's not your front end firewall, it's very easy to setup for VPN and also web caching. It also makes a firewall in general. I know most people would laugh at using a Microsoft solution for security but I would have to say that ISA 2004 and up is an exception it really is a pretty good secure product.
Wow nobody else uses Checkpoint?
I mean I use ipfw at home and simple iptables scripts on servers, but our internet facing firewalls run Checkpoint NGX SecurePlatform.
I use IP-Cop at www.ipcop.org
and OpenVPN at www.openvpn.se
and a bunch of plugin's I have 8 of these in service
now... Overall it is easy to install. I use an old computer
with 2 NIC's Windows 98 Boxes work real well...
I have used New Dells due to customer preferences
and I was short of old boxes. (Nice to Recycle!!)
Only drawback, You have to install 2 of the packages
from the command line, and a working knowelege of
Linux is good too!!!
OpenBSD 3.8 running on a soekris box
/cbo
I've used and managed all sorts of Firewalls...
Cisco PIX, Checkpoint FW/1 (on Nokia hardware), Juniper NetScreen, PF on Open- and FreeBSD, FreeBSD IPFilter (ipf). They all have their pros and cons, use the one that bests suits your situation.
The guy that said he's using iptables on FreeBSD (I've been using FBSD since 3.0) just made my day :)