OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Cedric Blancher (blanchercartel-info.fr)
Date: Sun Sep 30 2001 - 16:33:59 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On sam, 2001-09-29 at 21:33, Kyle Wheeler wrote:
    > Well, among other things, the firewall wouldn't have an IP address on
    > the internet - and thus would be much harder to attack because a hacker
    > can't make a direct connection to it.

    Configure your box as a bridge and patch kernel so ipchains can see
    bridged paquets.
    I think that a patch for netfilter is available (someone confirm ?) 

    -- 
Cédric Blancher
Consultant sécurité systèmes et réseaux
Cartel Informatique - Groupe CGBI - http://www.cartel-info.fr/
Tél : 01 44 06 97 87 - Fax 01 44 06 97 99