Subject: Re: What is screend...
To: Andrew Cagney <email@example.com>
From: Rob Healey <firstname.lastname@example.org>
Date: 03/01/1996 09:46:49
> screend is a daemon/kernel-patch for BSD operating systems that can be
> used to construct an intelegent packet filtering gateway. Such a
> gateway would be used when building an internet firewall.
> The reference I have to screend is:
> which was taken from Chapman's Firewalls book. A preliminary glance
> through it suggests that it should for the most part just drop in.
> To be honest, I'm supprised that someone didn't simply integrate it into
> the NetBSD-1.1 kernel. While it may not be the perfect packet filtering
> system, it at least, appears to both be fairly well known and come off
> the shelf.
Probably because there are "better" packet filters that could just
"drop in" and choosing one over another would probably cause
endless bickering that we don't need. My personal bias is toward
the ip_filter package from down under and I'm sure there are
others. I'd rather not have to rip out some other filtering
code in order to use the one I want and I'm sure others would
feel the same about their religeous packet filter/logging choice...