I've used Mason on 2 boxes and it seemed to lock things
down pretty well.  My main gripe is that I ended up with
huge unwieldy scripts after letting it do it's learning.  I
still "haven't found the time" to learn IPchains syntax
(yes, I know that's lame).

  I've downloaded but haven't fscked with a GUI (web?) based
tool called Firestarter, you might check on that.  I also
saw (yesterday?) that there's a beta of a GUI firewall tool
from Mandrake, which I think is the paying home of Jay
Beale, Bastille guy.  I expect that's worth looking into.

  I'd search on linuxtoday.com for more candidates.  

BTW, if you're using portsentry you owe it to yourself to
try out logcheck.

Steve
Donald Martinez wrote:
> 
> Does anybody have any experience using mason when setting up a firewall?
> I was wondering if anyone had any experience using it or had some
> recommendations on some good utilities on setting up a good firewall. I
> have snort, and portsentry and am looking for any other utilities that
> would be good for protecting against my webserver.
> 
> I understand that a poorly setup firewall is worse than not having one
> at all and with that being said any input would be greatly appreciated
> :)
> 
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> 
> Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss