Firewalls White Papers

IPFilter: A Unix Host-Based Firewall

Overview With the advent of TCP wrappers and dedicated firewalling hardware, host-based firewall packages for UNIX operating systems have fallen by the wayside. Daemons such as inetd, xinetd, and tcpd allow hosts to effectively limit outside connections to an out-of-the-box UNIX distribution, and as such, many users seldom consider using a third party firewall package. IPFilter is one such host based firewall. It provides several useful security features which are lacking in stock UNIX installs, such as the ability to filter traffic, protocol/packet state filtering, and true stateful firewalling. This paper will explain the benefits of using IPFilter on a UNIX host by detailing its configuration and implementation on a Solaris 8 SPARC box, and providing examples users can follow to safeguard their machines against some of the more popular remote exploits.

Further White Paper Details
PublisherSANS Institute File FormatPDF, requires Acrobat Rdr 5
Date PublishedJune 2002 Downloads9
FormatWhite Papers   
Topics
Thin clients switch on digitally excluded

Thin clients switch on digitally excluded

Case study: Digital inclusion project tackles social exclusion in Liverpool more

Renault goes multilingual

Renault goes multilingual

Case study: Translation tech turns docs into 23 languages… more


Quick Sitemap Links: