SJS> Date: Thu, 23 May 2002 18:01:03 -0400 (EDT) SJS> From: Steven J. Sobol SJS> The box I want to build is passing packets between the rest SJS> of my network (and the public Internet) and one server that SJS> will hold sensitive data. It'll be a Linux box with the SJS> TCP/IP stack running in bridged mode, with two ethernet SJS> adapters installed. The box just needs to boot up and SJS> run. It doesn't need to log anything. Might I suggest { ipfw | ipf | pf } on *BSD? Depending on the flavor you choose, you'd have some or all of: Stateful filtering... ISN proxying... firewall rules that can't be changed without a reboot... diverting packets to userland for custom munching... Not to turn NANOG into a BSD evangelism list, but many people who grok BSD and Linux seem to choose BSD. Try it. -- Eddy Brotsman & Dreger, Inc. - EverQuick Internet Division Phone: +1 (316) 794-8922 Wichita/(Inter)national Phone: +1 (785) 865-5885 Lawrence ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Date: Mon, 21 May 2001 11:23:58 +0000 (GMT) From: A Trap <blacklist@brics.com> To: blacklist@brics.com Subject: Please ignore this portion of my mail signature. These last few lines are a trap for address-harvesting spambots. Do NOT send mail to <blacklist@brics.com>, or you are likely to be blocked.