Subj : Re: Closing up Telnet
To   : Kevin Nunn
From : digimaus
Date : Fri Mar 18 2022 16:14:53

-=> Kevin Nunn wrote to Digimaus <=-

 KN> But yes, if I was wanting a "firewall" for my entire network, I'd run
 KN> it on better hardware, multiple gb interfaces, etc. But I have always
 KN> thought that routers do a fairly good job of all that, so I just use
 KN> routers.

Routers are good at NAT but for firewalls, it's different, especially with
port forwarding because it then becomes the responsibility of the client
that receives those forwarded ports to protect itself since the firewall
doesn't do stateful inspection (or any inspection) on the forwarded traffic
so I'd still look at the firewall in ArcaOS.

-- Sean

.... If a circuit cannot fail, it will.
--- MultiMail/Linux
 * Origin: Outpost BBS * Johnson City, TN (618:618/1)

.