Re: Going small

From: Nikolas Britton (freebsd_at_nbritton.org)
Date: 04/14/04

  • Next message: John Murphy: "Re: Going small" 
    Date: Wed, 14 Apr 2004 12:51:00 -0500
To: Andrew White <andywhite@ntlworld.ie>, freebsd-newbies@freebsd.org

    I'll 2nd that, I've been a happy m0n0wall user since pb14 (mid 2003?).
    the thing "just works".

    http://www.m0n0.ch/wall/

    Andrew White wrote:

    >You might want to try m0n0wall
    >http://www.m0n0.com/
    >
    >You could forget having a hardrive at all and use a flashcard instead,
    >leaving you with no mechanical parts to fail...
    >
    >
    >.Andrew
    >-----Original Message-----
    >From: owner-freebsd-newbies@freebsd.org
    >[mailto:owner-freebsd-newbies@freebsd.org] On Behalf Of John Murphy
    >Sent: 14 April 2004 13:07
    >To: newbies@freebsd.org
    >Subject: Going small
    >
    >Hope everyone had a nice easter.
    >
    >I've decided to stop messing about with noisy old 486s for the gateway/
    >firewall. The one I've been configuring runs just fine but it has a large
    >hot heatsink cooling some power transistor/regulator devices and I just
    >don't trust it for 24/7 use in a cupboard...
    >
    >I'm going to get a Soekris Net4801 and fit a 30G HD from a broken laptop I
    >was given. Just undecided whether to get it from the USA or Belgium (I'm in
    >the UK); the 21%VAT against the better exchange rate etc.
    >
    >(Update: they were out of stock at the manufacturers so I've ordered one
    >from http://soekris.kd85.com with case and 2.5" hard drive mounting kit.
    >Got my name on the last one! I could have it before the weekend.)
    >
    >I don't know much about them at this stage, except they run FreeBSD of
    >course and they're probably ten times as efficient as the thing I was going
    >to use. http://www.soekris.com/
    >
    >I'll write my findings here if no-one strongly objects.
    >
    >Some good pages I've found so far:
    >http://www.xinu.nl/unix/soekris/net4801/
    >http://phk.freebsd.dk/soekris/
    >http://www.amd.com/us-en/ConnectivitySolutions/ProductInformation/0,,50_2330
    >_9863_10524,00.html
    >
    >I'll be going against the recommendation to use a physically separate device
    >for the firewall on the grounds that I can enable some server side filtering
    >at the ISP and I can't afford two soekrises just now.
    >So it will run ipf, ipnat, ipmon, ftpd, ntp, bind (caching only at first),
    >sendmail and boa (web server).
    >
    >--
    >John.
    >
    >

    _______________________________________________
    freebsd-newbies@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-newbies
    To unsubscribe, send any mail to "freebsd-newbies-unsubscribe@freebsd.org"

  • Next message: John Murphy: "Re: Going small"

    Relevant Pages

    • Going small
      ... I'm going to get a Soekris Net4801 and fit a 30G HD from a broken laptop ... device for the firewall on the grounds that I can enable some server ... sendmail and boa (web server). ...
      (freebsd-newbies)
    • Re: disconnect a hacker
      ... My Web server station is right next ... my attention divided by security concerns... ... see an IP connected to port 80, ... I've been forwarding my firewall logs to my ISP, ...
      (alt.computer.security)
    • Re: Firewall on server itself
      ... Perhaps the iptables could defend against an intruder who is already ... Firewall vender specific vulnerabilities ... >> be configured to protect the web server as well other computers on ... > The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
      (Security-Basics)
    • Re: [fw-wiz] Using SSL accelerators in firewalls
      ... It also depends on what you're using your SSL for, and how tightly you can couple ... your firewall with your web application. ... web server don't have to be very aware of each other. ... >> lost in the process and the security of transactions eroded. ...
      (Firewall-Wizards)
    • Re: security advice (possible hacker activity?)
      ... > trojan or worm is installed onto the web server. ... > itself through the firewall to an email user on a PC, ... > the IIS web server. ... IWAM runs any site with Access or SQL. ...
      (microsoft.public.win2000.security)