[Techtalk] Good firewall configuration tool for debian

[Devdas Bhagat]

On 09/04/04 23:08 +0530, Devdas Bhagat wrote:
> On 09/04/04 10:18 -0700, Carla Schroder wrote:
> > On Thursday 08 April 2004 5:55 pm, Kathryn Andersen wrote:
> > > If/When I move to ADSL... I notice in the listings of ADSL modems, one
> > > could get a plain modem, or one could get a router which has all sorts
> > > of built in stuff including NAT and a firewall.  Is it better to just
> > > set up all that stuff on one's own box, or to use a router?  All I know
> > > about NAT is that some people think it's evil...
> > > 
> > 
> > NAT is lovely, not evil. You have only one exposed public IP address, the
> NAT is evil. It breaks the peer to peer nature of the Internet.
http://www.cctec.com/maillists/nanog/historical/0109/msg00179.html
I suggest reading the followups as well.

http://www.cs.utk.edu/~moore/what-nats-break.html

http://www.apnic.net/meetings/17/docs/sigs/policy/addrpol-pres-randy-nats.pdf

http://www.ipv6nordic.com/news/p/20

http://www.sandelman.ottawa.on.ca/ipsec/2002/02/msg00117.html
Please read the full thread.

http://www.sctp.org/archive/0272.html
http://www.tuketu.com/dsl/nat2.htm

http://www.faqs.org/rfcs/rfc2993.html
A good read.

http://www.circleid.com/article/494_0_1_0_C/

http://www.fourmilab.ch/speakfree/unix/

Devdas Bhagat