>They look pretty tight from the outside. You can do better with >a Linux/*BSD/Solaris firewall of course. For instance, you can't >ping my firewall from the outside and I don't think you can do that >with one of these. How does refusing to do ICMP make a box more secure? .