[ILUG] Firewalls... linux -v- BSD

[Conall O'Brien]

On Wed, Sep 06, 2006 at 11:33:25PM IST, Daniel Shaw 
<dshaw78 at gmail.com> incoherently babbled:

> What's the issue with NAT? This is not a troll, but an honest query.
> At this stage I really don't see how it's bad in a home network. The
> simplest way here would be to have the (linux) firewall as the only
> device as far as Magnet or whoever is concerned. Then on the
> firewall/gateway just setup dhcpd which is very simple to do on any
> recent distro.

There are lots of protocols which do not work well when the packet
headers are being rewritten and quite a few of these are becoming quite
popular at the moment, eg VoIP and AV protocols such as SIP and H.323.


Particularly with VoIP protocols, there are new protocols like IAX2 to
workaround such issues, but their adoption isn't very quick.

-- 

Conall O'Brien

+353 (0)1 6535148 | sip:31313 at blueface.ie 

http://www.conall.net

Programming (n.):
    1. The art of debugging an empty file.
    2. A pastime similar to banging one's head against a wall, but with
		  fewer opportunities for reward.
    3. The most fun you can have with your clothes on (although clothes
		  are not mandatory).

										      Eric S. Raymond - The Jargon File