<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>http://pcug.org.au/info/index.php?action=history&amp;feed=atom&amp;title=Firewall_Software</id>
	<title>Firewall Software - Revision history</title>
	<link rel="self" type="application/atom+xml" href="http://pcug.org.au/info/index.php?action=history&amp;feed=atom&amp;title=Firewall_Software"/>
	<link rel="alternate" type="text/html" href="http://pcug.org.au/info/index.php?title=Firewall_Software&amp;action=history"/>
	<updated>2026-04-26T17:59:00Z</updated>
	<subtitle>Revision history for this page on the wiki</subtitle>
	<generator>MediaWiki 1.39.17</generator>
	<entry>
		<id>http://pcug.org.au/info/index.php?title=Firewall_Software&amp;diff=622&amp;oldid=prev</id>
		<title>Rpeters: outlined  packet-filtering firewalls</title>
		<link rel="alternate" type="text/html" href="http://pcug.org.au/info/index.php?title=Firewall_Software&amp;diff=622&amp;oldid=prev"/>
		<updated>2012-09-21T00:53:45Z</updated>

		<summary type="html">&lt;p&gt;outlined  packet-filtering firewalls&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;== Packet-Filtering v Router ==&lt;br /&gt;
a perenniel question is whether it is preferable to run a packet-filtering style firewall on &amp;#039;&amp;#039;&amp;#039;each&amp;#039;&amp;#039;&amp;#039; workstation/laptop/pocket-PC or to use a &amp;#039;&amp;#039;&amp;#039;single&amp;#039;&amp;#039;&amp;#039; &amp;quot;hardware&amp;quot; router to protect the whole LAN&lt;br /&gt;
=== Packet-Filtering ===&lt;br /&gt;
==== Advantages ====&lt;br /&gt;
*no additional hardware, cost, wattage&lt;br /&gt;
*zero acreage&lt;br /&gt;
==== Disadvantages ====&lt;br /&gt;
*generally  less  &amp;quot;hardened&amp;quot;&lt;br /&gt;
**many more background prolcesses need to be running to support user apps&lt;br /&gt;
==== Linux ====&lt;br /&gt;
Most Linux include a packet-filtering style firewall&lt;br /&gt;
*usually activated, by default&lt;br /&gt;
**but &amp;#039;&amp;#039;&amp;#039;check&amp;#039;&amp;#039;&amp;#039;&lt;br /&gt;
*efficacy likely to be similar&lt;br /&gt;
**based on iptables&lt;br /&gt;
**may also include ip6tables and ebtables&lt;br /&gt;
*administrative interface specific to distribution&lt;br /&gt;
**&amp;quot;Guarddog&amp;quot; in KDE provides consistent interface&lt;br /&gt;
&lt;br /&gt;
==== Mac OSX ====&lt;br /&gt;
citation needed&lt;br /&gt;
==== Windows ====&lt;br /&gt;
citation needed&lt;br /&gt;
&lt;br /&gt;
=== Gateway/Router ===&lt;br /&gt;
Although these are typically a separate hardware item they are not necessarily an &amp;#039;&amp;#039;&amp;#039;additional&amp;#039;&amp;#039;&amp;#039; hardware item, often being combined with an ethernet switch and/or DSL modem&lt;br /&gt;
==== Advantages ====&lt;br /&gt;
*generally  more  &amp;quot;hardened&amp;quot;&lt;br /&gt;
**by eliminating many background prolcesses that are not needed to support user apps&lt;br /&gt;
*&amp;#039;&amp;#039;&amp;#039;single&amp;#039;&amp;#039;&amp;#039; point of installation, configuration and update&lt;br /&gt;
*provides protection to &amp;quot;visiting&amp;quot; laptops etc &lt;br /&gt;
==== Disadvantages ====&lt;br /&gt;
*possible additional hardware, cost, wattage&lt;br /&gt;
**although often combined in a single unit with modem and/or ethernet switch&lt;br /&gt;
*sporadic updates for commercial units&lt;br /&gt;
**OTOH frequent updates available  for DIY units&lt;br /&gt;
&lt;br /&gt;
== Recommendations ==&lt;br /&gt;
#most households now have more than one device accessing the Internet&lt;br /&gt;
#*a separate Gateway/Router device makes sense in this scenario&lt;br /&gt;
#portable devices (laptops, sub-compacts  etc) should &amp;#039;&amp;#039;&amp;#039;additionally&amp;#039;&amp;#039;&amp;#039; have  a filtering firewall enabled&lt;br /&gt;
#*should not conflict with router, when at &amp;quot;home-base&amp;quot;&lt;br /&gt;
For further recommendations see (Gateway_Router)&lt;br /&gt;
&lt;br /&gt;
[[User:Rpeters|Rpeters]]10:53, 21 September 2012 (EST)&lt;br /&gt;
[[Category:Technical Info]]&lt;/div&gt;</summary>
		<author><name>Rpeters</name></author>
	</entry>
</feed>