I guess redundancy is not important? -----Original Message----- From: netfilter-admin@lists.netfilter.org [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Nick Drage Sent: Tuesday, November 26, 2002 8:14 PM To: netfilter@lists.netfilter.org Subject: Re: IPTABLES vs Checkpoint On Tue, Nov 26, 2002 at 05:32:34PM -0500, Nix N. Nix wrote: > On Tue, 2002-11-26 at 14:28, Wayne de Nobrega wrote: <snip> > Nonetheless: Checkpoint and iptables are not necessarily mutually > exclusive. Consider the following setup: > ________ __________ ________ ________________ > / \ / \ / \ / \ > | Internet +--+ Checkpoint +--+ iptables +--+ Internal Network | > \________/ \__________/ \________/ \________________/ As stated elsewhere, Checkpoint isn't just a proxy server. But anyway, if it was a mere proxy, wouldn't you want it on the clean side of the iptables box, rather than the dirty side? -- FunkyJesus System Administration Team
