full-disclosure - PIX vs CheckPoint

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: jlk at thrashyour.com (John Kinsella)
Subject: PIX vs CheckPoint

On Tue, Jun 29, 2004 at 01:46:30PM -0700, Eric Paynter wrote:
> On Tue, June 29, 2004 11:59 am, James Patterson Wicks said:
> > CheckPoint's interface is very intuitive and easy to use.
> Easy to use in a "Microsoft" kind of way. Last I heard, it does nice
> things for you like always allow DNS traffic through, even if you have no
> port 53 rule and a deny all policy. How helpful!

Sounds like somebody needs to learn how to run FW-1.  There's several
"implied" rules which are set from Global Properties, and are only
displayed/logged if you specity to display/log implied rules.

John