What is the Best Firewall for Servers?
Sushant Bhatia asks: "I maintain a bunch of servers (Win 2003/XP Pro) at our labs in the university. Of late, the number of attacks on the computers has been more noticeable. The university provides firewall software (Kerio) but that doesn't work with Win 2003 (works with XP). And so we keep getting hit by zombie machines taken over in the Education Department or from Liberal Arts :-). So what does the Slashdot crowd use when they need to secure their Linux and Windows servers? Does it cost less than US$100?"
You keep getting hit by zombie machines?
Liberal Arts zombies? Are you sure they're not dogs?
(And, as always, the best answer to your question may come from Google. Linux.com | A Linux firewall primer.)
We recently had heard in the office over one of the Yellow Machine that's made by Anthology Solutions.
I've found that for 99% security, the best solution is to unplug the ethernet cable on my server and just use it locally (kind of defeats the point, huh?)
... stupid squirrels...
The missing 1% is for the ninja squirrels
Wire cutters. $3.95, Radio Shack. 100% protection against any network based attack.
agreed. and if your not command line oriented, use the webmin interface to create your rules.
slightly off topic but does anyone else have trouble reading those annoying "confirmation your not a script images"? The one I am looking at right now is nearly impossible to read.
Ceramic wafers with asbestos stuffing...
Some settling may occur during posting.
Are you sure you are human?
When its liberal arts machines getting infected, I've found the BEST firewall to be a pair of wire cutters. NOTHING gets through after the skilled use of these babies.
I've been running an OpenBSD/PF firewall at home for ages now and the system load has never gone above 0%.
:)
Have you tried plugging it in?
everyone knows linux is for making 'old hardware useful' and reducing costs for IT labs by using junk from 1985 to run your global warming simulation
that was me.
Take a pair of bolt cutters to the network cable.
---
Or the Aliens option: "Bug out, nuke the site from orbit. Only way to be sure"
Geez, I thought the only way to keep a windows system completely secure was to leave it off....
"It is a good divine that follows his own instructions" - Portia, The Merchant of Venice