RE: [FW1] Nokia question

[Rogue Bolo <roguebolo@FW1-NOSPAMyahoo.com>]

Wow, you are so wrong about where Nokia gets the
components for its appliance. First off, IPSO is not a
overhauled and heavily modified kernel of FreeBSD
2.2.6. FreeBSD source code was used as a model to
develop a routing centric OS Only the components
related to that were used when building the core of
the OS, once that was done NEW components were written
to enable other services such as login, chmod, etc.
While it does utilize some of the core components that
FreeBSD does, they are new code written from the
ground up with security in mind. Are there
vulnerabilities? Sure, every OS has them and
responsible OS manufacturers work to resolve them as
quickly as possible. Nokia included. GATE-D? You could
not be further from the truth. Licensing for IGRP and
BGP paid to Cisco? Ipsilon founders would committ
sepuku before giving a nickel to Cisco. They is a hard
core anti-Cisco sentiment within the founders of
Ipsilon. So, what does that leave us? The patent on
IGRP was co-held by one of Ipsilon's founders and
Cisco dated back to when he developed there many many
years ago. As far as BGP goes, Ipsilon/Nokia's BGP
implementation is the same as that developed for a
major SOHO player that has a similar dislike of all
things Cisco-y and that royalty is paid to them, not
Cisco. -EOL

PS Phoneboy is on vacation and not here to defend
himself.


--- Jon Vandiveer <vandivee@midsouth.rr.com> wrote:
> 
> Nokia IPSO , at last published documentation,
> utilizes FreeBSD 2.2.6 as the
> base.
> A Steven points out, it has been completely
> overhauled and has a heavily
> modified kernel. (it still does suffer from some of
> the exploits that exist
> in FreeBSD, hopefully IPSO 3.3 will patchup some of
> the underlying security
> holes)
> 
> Not only does it offer a Cisco IOS'ish feel to some
> of the command line
> syntax, it also runs gated with IGRP and BGP4,
> licensed from Cisco.
> 
> But I am sure PhoneBoy could correct me on some of
> these statements.
> 
> Jon
> 
> 
> Date: Wed, 6 Dec 2000 09:56:36 -0500
> From: Steven Schuster <SSchuster@midwestiso.org>
> Subject: RE: [FW1] Nokia question
> 
> Short answer:
> 
> The Nokia boxes are running a version of Checkpoint
> that has been ported to
> their specific OS.  Once upon a time, it used to be
> a version of BSD, but
> the Ipsilon (before Nokia bought them...) Engineers
> took it apart and put it
> back together specifically designed for running
> Firewall-1.  It is not
> running any Linux compatibility libraries, thus is
> not running the Linux
> version of Checkpoint.
> 
> 
> 
> Steve Schuster, CCSE, CCNA
> Midwest ISO
> Security Analyst
> 
> 
> - -----Original Message-----
> From: Marco Shaw [mailto:marco@nbnet.nb.ca]
> Sent: Tuesday, December 05, 2000 1:56 PM
> To: fw-1-mailinglist@lists.us.checkpoint.com
> Subject: [FW1] Nokia question
> 
> 
> 
> I believe someone mentioned here mentioned that the
> Nokia solution used FW-1
> on a customized version of FreeBSD.
> 
> Does anyone know how this is implemented exactly? 
> Does the OS have the
> Linux compatibility library so it is running the
> FW-1 version for Linux?
> 
> Marco
> 
> 
> 
> 
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================


__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================