full-disclosure - OSS passive firewall

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: f0x at squirrelsoup.net (f0x@...irrelsoup.net)
Subject: OSS passive firewall

About an OSS passive packet monitoring thing.  I know openbsd can do
direct interface to interface packet forwarding, and you can add a bunch
of ip-chains ish stuff to this to make a completely invisible yet quite
functional firewall.  A very good description of what exactly I mean by
this and how to go about doing it can be found here:
http://www.openlysecure.org/openbsd/how-to/invisible_firewall.html  It's
pretty interesting a terribly secure (terribly in a good way :-p).

Gabe Arnold
www.squirrelsoup.net