[ale] IPTables and Stateful-Inspection

[Raju]

Hey folks,
  A couple of question on IPTables and your comments

1. Most Firewalls (at least the ones that do Stateful-Inspection) offers
TCP sequence number randomization. This helps preventing attacks against
sequence number guessing. Does IPTables offer this feature?

2. If IPtables supports Stateful-Inspection, where would you view the
state information?

I have worked with commerical firewalls for several years namely Cisco's
PIX and Checkpoint, and personally would like to see more Linux-based
Firewalls in the market:-).

Regards,

Raju

-
4SecureNet
mr at 4securenet.com



_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale