Kensai

[Log in to get rid of this advertisement]

Shorewall, the best firewall configuration tool for me.

pusrob

Hi Jeremy.
What about Guarddog? It is much much better than Firestarter. With it you can finetune the firewall much easier than with Firestarter. Firestarter has much less options, so Guarddog deserves to be added. Thanks.

Old_Fogie

I actually find Guarddog a quick rude way to generate the tables, but out of the box I find it drops a ton of related packets. I still had to learn IP tables to get it so I didn't drop packets all over the place and I'm just talking about simple home use. Did not have that issue with firestarter at all.

However firestarter requires a full installation + the kitchen sink of gnome & pam so it's not usable for me on Slackware 11.0. I still don't understand why it requires Avahi..but I digress.

I've yet to find a reliable graphical firewall table application in gnu/linux that is half as good as a zone alarm from windows and not requiring me to get in there by hand a fully tweak it, but that's my experience. Plus I don't think any of linux graphical app's support IPV6?

I'm pretty optimistic about the kmyfirewall that is advancing in development pretty rapidly, but still takes some tweaking as well. But I think shortly it should "be there" if you know what I mean.

k1e0x

Two things I noticed that should be added. (maybe next year)

Ettercap and KMyFirewall.

I voted for nmap, as overall it is a program that does one thing very very well.

poweredbydodge

I nominate ASSP (anti spam smtp proxy). Damn good app.

Eduard Munteanu

Come on, SELinux should meet some competition here (or partners, it depends on the point of view)... just take a look at the Hardened Gentoo project and add here some more options, like GRSec.

Crito

I prefer GRSec to SELinux myself. Voted for Nessus though, because there's really nothing that can compete with it at the price level (which is free, as in air -- beer kills kids).

Wintceas

TCPDUMP will always be a classic! Thank you, guys! You're really rule.

Cpoc

No vote for me cause I can't choose just one.

Mikesoft

They all seem to do different things. Well for my cisco cource Wireshark is very useful so ill vote for that.

raskin

Every body says these tools do different things. This poll should have been done with a wizard - user picks some positions and wizard votes at random among them. Then there will be no 'ill votes'..

pilatus666

Shorewall as firewall nmap and ethreal also very good apps

alienux

From the available choices, this is an easy one for me. I've been a Checkpoint technician for a number of years, and always wanted to find a similar affordable firewall for home. When I came across fwbuilder I was pretty excited, and have since built 4 firewalls from scratch (for myself and for other techs I work with) using fwbuilder and iptables, each with full traditional DMZ and a couple with multiple DMZs.

Since, in my opinion, Checkpoint's SmartTracker is the greatest logging app in the firewall industry, I tried to find something similar, so I use Kiwi syslogviewer to color code /var/log/messages and although it it's not as good as Checkpoint's SmartTracker, it is excellent in combination with fwbuilder and iptables.

alphamugwump

What about MoBlock? It's pretty much indispensable for filesharing.

floydking

Clam. I feel I can trust this not to allow me to pass any ciber-social diseases onto those who make the odd choice to stay with Windows.