RE: SunScreen Lite vs. IPF.

From: Neil Dickey (neil@geol.niu.edu)
Date: 08/14/01 

Message-Id: <200108141613.LAA02937@shiloh.geol.niu.edu>
Date: Tue, 14 Aug 2001 11:13:16 -0500 (CDT)
From: Neil Dickey <neil@geol.niu.edu>
Subject: RE: SunScreen Lite vs. IPF.
To: focus-sun@securityfocus.com

"Stuart Flisher" <stuart.flisher@dalofte.co.ae> wrote:

>One point IPF is a packet filter (right?) whereas SunScreen is stateful
>inspection.

IPF is a firewall, which can be used as such on a bridge or gateway,
or on individual machines as a packet filter. It is capable of stateful
inspection of packets, NAT, etc., and there's no significant loss in
performance -- depending, of course, on how large and complex one lets
the configuration file become.

It's freeware, and installs to the kernel via pkgadd as a loadable module
so it's easy to remove if necessary. My advice would be to try it, and
if you don't like it pull it out. The only thing you'd lose is a little
time.

Best regards,

Neil Dickey, Ph.D.
Research Associate/Sysop
Geology Department
Northern Illinois University
DeKalb, Illinois
60115

Quantcast