Re: [LUNI] firewall design

From: Jack Beglinger (jackb_guppy@yahoo.com)
Date: Fri Mar 23 2001 - 15:35:39 CST

  • Next message: Martin Maney: "Re: [LUNI] OT: Soldering Irons..."

    one of the early posts of how-to:
    http://personal.mco.bellsouth.net/mco/j/g/jgoerz/smoothwall-faq/smoothwall-faq.html#AEN93

    I made a hack that worked with 0.9.6 release and
    below. Supports two nic and takes a total of twenty
    minutes.

    The 0.9.8 release is in second beta right now. Will
    be full release next friday. Support 3 nics.
    Currently install time is less than 10 minutes. I have
    beta version if you want to install now.

    DHCP server is already installed and configured.
    DHCPD for DSL / CABLE connections is built in.

    Basicly solid and fast.

    You only need an old 486 with 16 megs to have a great
    firewall for cable to DSL.

    Well help you do it. Also have old boxes and nics if
    you need them too.

    jackb

    --- Andrew Morrison <morris@tbone.physics.niu.edu>
    wrote:
    >
    > I looked at this site and it seemed to me that the
    > firewall only protect
    > dial up connections. Is that right? Seems not
    > very useful to me if
    > that's true. (Unless I'm running an ISP with dial-up
    > users).
    >
    > Please correct me if I'm wrong.
    >
    > Andrew
    >
    >
    > On Fri, 23 Mar 2001, Jack Beglinger wrote:
    >
    > > Go look at smoothwall.org
    > >
    > > NEW release 0.9.8 (beta available now release is
    > next
    > > friday) as RED-External, Orange-DMZ and
    > GREEN-Internal
    > > nic support.
    > >
    > > I use 0.9.6 release for home and handed out
    > machines
    > > at meetings - help install at Univ in Evanston on
    > > three machines (they wanted multiple protected
    > > internal networks).
    > >
    > > It is about a 20Meg disto (based on VA Linux 6.2.1
    > /
    > > Redhat 6.2) and takes about 20 minutes to load
    > > including teaks.
    > >
    > > I also have some old 486 and p75 that run great as
    > > firewalls with this software. If another machine
    > is
    > > required.
    > >
    > > I am willing to help - just let me know.
    > >
    > > jackb
    > >
    > >
    > > --- alan henn
    > <ahenn@whitefly.pldisease.msstate.edu>
    > > wrote:
    > > > i would like to request some imput about the
    > best
    > > > design
    > > > for a firewall given my limited resources and
    > needs.
    > > >
    > > > i work at a unviversity with all the security
    > > > implications
    > > > that go with it.
    > > >
    > > > Equipment:
    > > >
    > > > firewall: pentium II 64 MB ram, 1.2 GB, 2 NICs.
    > > > RedHat, 6.2.
    > > >
    > > > production machine: Pentium II 256 MB ram, two
    > HD
    > > > (one Linux 13 GB
    > > > one 4GB Windows.
    > > >
    > > > a laptop used both in field and office for
    > diverse
    > > > projects
    > > >
    > > > 4 place hub.
    > > >
    > > > Need a mail server, probably PostFix - unless i
    > hear
    > > > otherwise.
    > > >
    > > > The best firewall design seems to be a DMZ, but
    > i
    > > > don't have enough
    > > > machines.
    > > >
    > > > Should the mailserver go on the firewall or on
    > the
    > > > production
    > > > machine where i will be playing with databases,
    > > > docbook and
    > > > doing serious writing and minor graphics? And,
    > of
    > > > course making
    > > > serious mistakes.
    > > >
    > > > Is PMfirewall ok, or is it best to roll your
    > own?
    > > >
    > > >
    > > > Thank you.
    > > >
    > > > alan
    > > >
    > > > alan henn
    > > > Extension Plant Pathologist
    > > > Mississippi State University
    > > > ahenn@ext.msstate.edu
    > > > -=-
    > > > Linux Users Of Northern Illinois: General
    > Discussion
    > > > Mailing list.
    > > > For unsubscription, archives, and announcements
    > only
    > > > see http://luni.org
    > >
    > > -=-
    > > Linux Users Of Northern Illinois: General
    > Discussion Mailing list.
    > > For unsubscription, archives, and announcements
    > only see http://luni.org
    > >
    >
    > -=-
    > Linux Users Of Northern Illinois: General Discussion
    > Mailing list.
    > For unsubscription, archives, and announcements only
    > see http://luni.org

    -=-
    Linux Users Of Northern Illinois: General Discussion Mailing list.
    For unsubscription, archives, and announcements only see http://luni.org



    This archive was generated by hypermail 2b29 : Fri Mar 23 2001 - 15:40:01 CST

  •