[nsp] Network Firewall

[Lawrence Wong]

I guess that means it's an overkill for a small/medium
corporate network. :p

I was hoping to have a suitable firewall/IDS
configuration to protect a corporate network behind
multiple DS3 uplinks. Other than the usual stateful
filtering, a key concern would be DoS and DDoS
protection.

--- "Tantsura, Jeff" <jeff.tantsura at capgemini.com>
wrote:
> 
> Yes, I do.
> Actually, I was going to deploy this combination in
> the network but by
> that time found another job.
> For an ISP with 500000 home and a lot of business
> customers the
> price/quality relation was more than suitable.
> 
> Jeff
> 
> -----Original Message-----
> From: Lawrence Wong
> [mailto:lawrencewong72 at yahoo.com]
> Sent: Tuesday, June 22, 2004 1:24 PM
> To: Tantsura, Jeff; Goldberg Alain (IT); Lajber
> Zoltan
> Cc: cisco-nsp at puck.nether.net
> Subject: RE: [nsp] Network Firewall
> 
> Looks interesting. Do you have any idea how much
> does "arbor" cost?
> 
> --- "Tantsura, Jeff" <jeff.tantsura at capgemini.com>
> wrote:
> >
> > I like very much combination of arbor (for anomaly
> > detection) and
> > riverhead for cleaning the "abnormal" traffic.
> >
> > Jeff
> >
> > -----Original Message-----
> > From: cisco-nsp-bounces at puck.nether.net
> > [mailto:cisco-nsp-bounces at puck.nether.net] On
> Behalf Of Goldberg Alain
> > (IT)
> > Sent: Sunday, June 20, 2004 7:55 AM
> > To: Lajber Zoltan; Lawrence Wong
> > Cc: cisco-nsp at puck.nether.net
> > Subject: RE: [nsp] Network Firewall
> >
> >
> > If the issue is to stand against floods .... Look
> at
> > http://www.riverhead.com (It's Cisco).
> >
> >
> >
>
________________________________________________________________________
> >
>
________________________________________________________________________
> > _________________
> > Alain Goldberg - Network manager - CCDA/CCNA
> AGG-RIPE - Tower
> > Semiconductors LTD.    Tel : 972-4-6506003 Fax :
> > 972-4-6547788 Cell:
> > 972-64-209662
> >
>
________________________________________________________________________
> >
>
________________________________________________________________________
> > _________________
> >
> >
> >
> > -----Original Message-----
> > From: Lajber Zoltan [mailto:lajbi at lajli.gau.hu]
> > Sent: Thursday, June 17, 2004 11:18 PM
> > To: Lawrence Wong
> > Cc: cisco-nsp at puck.nether.net
> > Subject: Re: [nsp] Network Firewall
> >
> > On Thu, 17 Jun 2004, Lawrence Wong wrote:
> >
> > > Hi Miguel,
> > >
> > > Any idea how well Linux+Netfilter would stand up
> > against TCP/UDP/ICMP
> > > floods?
> >
> > A good pc, like ibm xseries x330 can stand up to
> 250 kpps with kernel
> > 2.4x, and 350kpps with 2.6.
> >
> > Bye,
> >
>
-=Lajbi=----------------------------------------------------------------
> >  LAJBER Zoltan               Szent Istvan Egyetem,
> > Informatika Hivatal
> >       engineer: a mechanism for converting
> caffeine into designs.
> >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at
> > http://puck.nether.net/pipermail/cisco-nsp/
> >
> >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at
> > http://puck.nether.net/pipermail/cisco-nsp/
> >
> >
> >
> >
> > Our name has changed.  Please update your address
> book to the
> > following format:
> > "recipient at capgemini.com".
> >
> > This message contains information that may be
> privileged or
> > confidential and is the property of the Capgemini
> Group. It is
> > intended only for the person to whom it is
> addressed. If you are not
> > the intended recipient,  you are not authorized to
> read, print,
> > retain, copy, disseminate,  distribute, or use
> this message or any
> > part thereof. If you receive this  message in
> error, please notify the
> 
> > sender immediately and delete all  copies of this
> message.
> >
> >
> 
> 
> 
> 
> 	
> __________________________________
> Do you Yahoo!?
> New and Improved Yahoo! Mail - 100MB free storage!
> http://promotions.yahoo.com/new_mail
> 
> 
> 
> 
> Our name has changed.  Please update your address
> book to the following format:
> "recipient at capgemini.com".
> 
> This message contains information that may be
> privileged or confidential and is the property of
> the Capgemini Group. It is intended only for the
> person to whom it is addressed. If you are not the
> intended recipient,  you are not authorized to read,
> print, retain, copy, disseminate,  distribute, or
> use this message or any part thereof. If you receive
> this  message in error, please notify the sender
> immediately and delete all  copies of this message.
> 
> 



	
		
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail