[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Checkpoint Firewall-1 on Linux ?
- To: "Ury Segal" <ury(at-nospam)linuxqa.com>
- Subject: Re: Checkpoint Firewall-1 on Linux ?
- From: Aharon Schkolnik <aharon(at-nospam)health.gov.il>
- Date: 18 Nov 2000 19:52:48 +0200
- Cc: "Gilad Ben-Yossef" <gilad(at-nospam)benyossef.com>, "Israeli Linux users list" <Linux-il(at-nospam)linux.org.il>
- Delivered-To: linux.org.il-Linux-il@linux.org.il
- In-Reply-To: "Ury Segal"'s message of "Sat, 18 Nov 2000 18:13:03 +0200"
- References: <m3hf57dx5j.fsf@netstats.matat.health.gov.il> <3A154713.8E3B10FA@benyossef.com> <002f01c0517a$6e9b37e0$6677fea9@ROADRUNNER>
- Sender: aharon(at-nospam)netstats.matat.health.gov.il
- Sender: linux-il-bounce(at-nospam)cs.huji.ac.il
>>>>> "Ury" == Ury Segal <ury@ibm.net> writes:
Ury> I saw FW-1 working great on Linux, fwstop made no problems,
Ury> works with 3Com 905B. And with Intel eepros.
Ury> The biggest problem is that there is no GUI for it on
Ury> Linux. There is for other UNIXes.
What do you mean no GUI ????
How do you manage it ???
Do you mean there is no management client for Linux ?
If you are on the firewall box itself, is there no GUI ?
If there is, can you not just use X to display it remotely ?
I currently use that method with our Sun OS. However, we just updated
the FW-1 version, and I was informed that I need a separate license
in order to do that !!
Ury> Should we volunteer to help CheckPoint port the GUI ?
Ury> -- Ury Segal Aduva INC
Ury> Phone: +972-3-7534300 Fax: +972-3-7534343
Ury> ----- Original Message ----- From: Gilad Ben-Yossef
Ury> <gilad@benyossef.com> To: Aharon Schkolnik
Ury> <aharon@health.gov.il> Cc: Israeli Linux users list
Ury> <Linux-il@linux.org.il> Sent: Friday, November 17, 2000 4:56
Ury> PM Subject: Re: Checkpoint Firewall-1 on Linux ?
>> Hi,
>>
>> Aharon Schkolnik wrote: > > Anyone running Checkpoint
>> Firewall-1 on Linux ?
>>
>> Yes, I'm running it for around two weeks now. So far it's
>> running absolutely fabulous.
>>
>> I did head a lot of FUD about this product (on Linux, I've been
>> using Firewall-1 on other platforms for years) before
>> installing it, but so far the only issue (as these things are
>> called din corporatlandia) is that if you take the fw down for
>> any reason ("./fwstop") you'll have to restart the network
>> cards ("/etc/rc.d/init.d/network restart" or ifconfig down and
>> up for the non RH among us) or the network cards start blasting
>> you with kernel messages about some lack of memory - my guess
>> is that FW-1 forgets to unregister some hook it's
>> using. However after doing the restart everything is back to
>> normal.
>>
>> Nir Simyonovitch (Sorry if I didn't get your name right, dude
>> ;-) told me he saw major problems using FW-1 on Linux with
>> INTEL NICs (the eepro100's) so I didn't use those.
>>
>> > > Anyone know who provides good support in Israel ?
>>
>> Artnet. http://www.artnet.co.il
>>
>> > > Anyone have any comments/warnings/suggestions ?
>>
>>
>> Nir S. (from Artnet) cited for me some cool numbers on
>> completely unofficial tests he made with FW-1 on NT, Solaris
>> x86 and Linux. If i got him correctly nunberswise Linus needs
>> not be ashamed of his beast l-))
>>
>> Gilad.
>>
>> =================================================================
>> To unsubscribe, send mail to linux-il-request@linux.org.il with
>> the word "unsubscribe" in the message body, e.g., run the
>> command echo unsubscribe | mail linux-il-request@linux.org.il
>>
--
The day is short, and the work is great, | Aharon Schkolnik
and the laborers are lazy, and the reward | Israel Health Ministry
is great, and the Master of the house is | Aharon@health.gov.il
impatient. - Ethics Of The Fathers Ch. 2 | +972 2 670 6954/5
=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il