Subject: Re: What is screend...
To: Andrew Cagney <cagney@highland.com.au>
From: Rob Healey <rhealey@helios.mn.org>
List: current-users
Date: 03/01/1996 09:46:49
> screend is a daemon/kernel-patch for BSD operating systems that can be
> used to construct an intelegent packet filtering gateway.  Such a
> gateway would be used when building an internet firewall.
> 
> The reference I have to screend is:
> 
> 	ftp://ftp.vix.com/pub/vixie/screend-960126.tar.gz
> 
> which was taken from Chapman's Firewalls book.  A preliminary glance
> through it suggests that it should for the most part just drop in.
> 
> To be honest, I'm supprised that someone didn't simply integrate it into
> the NetBSD-1.1 kernel.  While it may not be the perfect packet filtering
> system, it at least, appears to both be fairly well known and come off
> the shelf.
> 
	Probably because there are "better" packet filters that could just
	"drop in" and choosing one over another would probably cause
	endless bickering that we don't need. My personal bias is toward
	the ip_filter package from down under and I'm sure there are
	others. I'd rather not have to rip out some other filtering
	code in order to use the one I want and I'm sure others would
	feel the same about their religeous packet filter/logging choice...

		-Rob