Firewalls White Papers
IPFilter: A Unix Host-Based Firewall
Overview With the advent of TCP wrappers and dedicated firewalling hardware, host-based firewall packages for UNIX operating systems have fallen by the wayside. Daemons such as inetd, xinetd, and tcpd allow hosts to effectively limit outside connections to an out-of-the-box UNIX distribution, and as such, many users seldom consider using a third party firewall package. IPFilter is one such host based firewall. It provides several useful security features which are lacking in stock UNIX installs, such as the ability to filter traffic, protocol/packet state filtering, and true stateful firewalling. This paper will explain the benefits of using IPFilter on a UNIX host by detailing its configuration and implementation on a Solaris 8 SPARC box, and providing examples users can follow to safeguard their machines against some of the more popular remote exploits.
| Publisher | SANS Institute | File Format | PDF, requires Acrobat Rdr 5 |
|---|---|---|---|
| Date Published | June 2002 | Downloads | 9 |
| Format | White Papers | ||
| Topics | |||



