From: H. N. <hen...@ar...> - 2008-07-10 16:16:08
|
Hello Holger, Holger Krull wrote: > Henry Nestler schrieb: > > > CoLinux was develop for speed and low recource consumption, not for > > security. CoLinux self as a Windows application needs access to network > > in your example. So, if you would allow coLinux the network access, then > > also all other Windows applications (bad or good) have access to the > > network in same way. Sure, you can install some tools to allow only > > coLinux the network access. But, after such setup, you not needs coLinux > > as firewall. You can than also setup your Firewall to allow only Browser > > and Mail and so on the internet access. > > > > The answer about "force all" traffic to coLinux is no. > > I dare to disagree. You can do that if you bridge the network card with > a tap device and remove any protocol from the bridge. All communcation > would go through colinux and get filtered and back to windows through a > second tap device. Oh, yes. That's a nice idea and would possible. I have forgotten and I was only thinking about typicaly coLinux installation with one tap device. Of corse, it wold be more hardly to setup it in comparsion with ready-to-use firewall setups al "ZoneAlarm". Henry Jetzt komfortabel bei Arcor-Digital TV einsteigen: Mehr Happy Ends, mehr Herzschmerz, mehr Fernsehen! Erleben Sie 50 digitale TV Programme und optional 60 Pay TV Sender, einen elektronischen Programmführer mit Movie Star Bewertungen von TV Movie. Außerdem, aktuelle Filmhits und spannende Dokus in der Arcor-Videothek. Infos unter www.arcor.de/tv |