All of lore.kernel.org
 help / color / mirror / Atom feed
From: Nick Drage <nickd@funkyjesus.org>
To: netfilter@lists.netfilter.org
Subject: Re: IPTABLES vs Checkpoint
Date: Wed, 27 Nov 2002 01:13:38 +0000	[thread overview]
Message-ID: <20021127011338.D14289@funkyjesus.org> (raw)
In-Reply-To: <1038349954.22977.34.camel@tux.go-nix.ca>; from nix@go-nix.ca on Tue, Nov 26, 2002 at 05:32:34PM -0500

On Tue, Nov 26, 2002 at 05:32:34PM -0500, Nix N. Nix wrote:
> On Tue, 2002-11-26 at 14:28, Wayne de Nobrega wrote:

<snip>

> Nonetheless:  Checkpoint and iptables are not necessarily mutually
> exclusive.  Consider the following setup:
>     ________      __________      ________      ________________
>    /        \    /          \    /        \    /                \
>   | Internet +--+ Checkpoint +--+ iptables +--+ Internal Network |
>    \________/    \__________/    \________/    \________________/

As stated elsewhere, Checkpoint isn't just a proxy server.

But anyway, if it was a mere proxy, wouldn't you want it on the clean side
of the iptables box, rather than the dirty side?

-- 
FunkyJesus System Administration Team



  parent reply	other threads:[~2002-11-27  1:13 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-11-26 19:28 IPTABLES vs Checkpoint Wayne de Nobrega
2002-11-26 20:53 ` Nigel Clarke
2002-11-26 22:32 ` Nix N. Nix
2002-11-26 23:19   ` Ivan E. Moore II
2002-11-27  1:11     ` Nick Drage
2002-11-27  1:13   ` Nick Drage [this message]
2002-11-27  2:17     ` Nigel Clarke
2002-11-26 22:32 ` Ben Russo
  -- strict thread matches above, loose matches on Subject: below --
2002-11-27  6:39 Reckhard, Tobias
2002-11-28 11:23 ` Florent AIDE
2002-11-27  6:45 Wayne de Nobrega
2002-11-27 12:06 ` Nick Drage

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20021127011338.D14289@funkyjesus.org \
    --to=nickd@funkyjesus.org \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.