I just found out that to add a 4th interface to our PIX firewall will cost $100 for the card, and $3,000 for the license upgrade to allow us to do that. WTF is all that about????
Anyway, I can't take credit for the PIX, but I've got my boss muttering about it... So screw them, I am dropping a few OpenBSD firewalls (not to replace the PIX, but to compensate for a few things). The IDS boxes running OpenBSD very nicely... the Spamd filtering does a very nice job, the disappointingly easy to configure CARP for redundant web servers was most impressive... The bump in the line (hopefully not easily detected) firewall to keep us safe from the main corporate network is coming together nicely... Soooon my pretty pix, soooon you shall be on Ebay... Any takers? If not, anyone got a six pack and some thermite? Seriously though - OpenBSD has been incredibly solid - Thanks much to everyone involved from the FAQ guys to the coders, to the planners and the doers.
