Re: [cobalt-security] Using a separate machine for firewalling.

["Kevin D" <kdlists@xxxxxxxxxxxxxxx>]

> Perhaps I didn't get what you're saying, but, if it's one machine that all
> of it's purpose is to ALWAYS DISCARD traffic to non-desired ports, and
> ALWAYS FORWARD traffic to desired ports to the Cobalt (or any other server
> in the world) - what difference does it make if all that is just replaced
> with  allow rules on the target Cobalt (or server) for the desired ports,
> and then a discard rule for all other packet matches?

Ease of configuration when protecting multiple servers (all traffic goes
through one place), egress filters (helps if firewall isn't compromised but
server is), layered security (if one installs both ip filters on target
machine and on firewall), logging/IDS.

If you've only got one server, it makes a bit less sense to have a separate
firewall...

Kevin