Re: Linksys router as Firewall

From: Eirik Seim (eirik_at_mi.uib.no)
Date: 07/19/03


Date: 19 Jul 2003 13:38:14 GMT

On Sat, 19 Jul 2003 03:52:28 GMT, Michael Ferguson wrote:
> On 18 Jul 2003 16:25:37 GMT, Eirik Seim <eirik@mi.uib.no> wrote:
>
> >Bad comparison, imho. A firewall in terms of computer and network security
> >is not[1] a device, but a concept. The term was adopted because we needed a
> >name on those things that kept unwanted things outside a security perimeter.
>
> Concepts alone don't keep your services from getting hacked into and
> your boxes from being rooted. :\ The fact is, the little toy boxes we
> buy to share our internet connection around the house have so little
> firewalling functionality, it really does not do the real firewalls
> justice to put them in the same category. I know; I have used both.
> Yes, the LinkSys "NAT forwarder" boxes are a suitable tool to keep
> malicious users from hacking into home users' machines; however, they
> are not firewalls, and it is almost impossible to fit these little toy
> boxes into anything but the default configuration in which they were
> originally intended to be used.

True. Seems I misread your post somewhat.

> The consumer-grade network appliances are really only useful for one
> thing: sharing your internet connection. At the same time, they
> conveniently block all incoming connection requests, which has the
> side-effect of helping to keep your machines safe. Thus, some people
> like to call them "firewalls", although they obviously do not possess
> any other features of modern firewalls.

Perhaps 'low-end screening router' would be a fitting name?

> [...] I would never drive a go-cart to work,

Now, _that_ could be fun. Completely insane, and asking for trouble, but
still a lot of fun.. Beeing a former go-cart racer, I just had to comment
on this one. Life starts at 15.000 rpm :)

- Eirik

-- 
New and exciting signature!


Relevant Pages

  • Re: [fw-wiz] Firewalls Compared
    ... The whole base of network security has always been traffic inspection. ... > Firewalls MUST be in a default DENY mode." ... Curing the symptom is not a cure for the disease. ... applications and make them not suck. ...
    (Firewall-Wizards)
  • Which firewall?: NetBSD/i386 vs Sygate Personal Firewall 5.0
    ... This is my first post to this newsgroup, so please forgive me if this ... I have a Linux installation at home in dual-boot with Windows on a PC ... on firewalls and ADSL setup. ... The intricacies of network security seem a little overwhelming ...
    (comp.security.unix)
  • Re: Hardware firewall - recommendation / advice
    ... >>fully customisable by web browser interface. ... >>you can forget about network security. ... >>firewalls for ages....you should too! ... I'm more comfortable with kit I can twiddle with to convince ...
    (comp.security.firewalls)
  • Re: Hardware firewall - recommendation / advice
    ... >>fully customisable by web browser interface. ... >>you can forget about network security. ... >>firewalls for ages....you should too! ... I'm more comfortable with kit I can twiddle with to convince ...
    (comp.security.firewalls)
  • Re: Firewalls, are they really necessary?
    ... I am under the impression that the general view regarding ... > firewalls is that they are essential to network security. ... telnet 82.39.40.103 110 ...
    (alt.linux)