Re: Question - Advice needed.

> The question is. What is the best Firewall to use?

That's subjective. Depends on the skill level of the individual who will 
be maintaining it, what kind of SLA management wants from vendors, etc.

I myself prefer pf from OpenBSD. Fast, simple, easy to use, powerful and 
free.

> Can a firewall be stuck _on_ the server?

Yes, but that is bad practice. Remember the maxim 'one machine, one 
job'. It makes it harder to defeat your security by minimizing attack 
vectors, though in practice, there is no such thing as being truly secure.

> The most important thing is the ability to remotely manage (ie. From
> another country)

Anything can be remotely managed, the question is what kind of interface 
is desired for that remote management? With something like pf, all you 
need to do is ssh into the box and fire up an editor. Very little to go 
wrong.

Of course web interfaces can be tacked on for that kind of thing, but if 
you're managing and configuring your firewall (or planning to) over the 
web then you're being foolish.

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------