Re: minimum requirements for a firewall

2002-07-11 Thread Kevin MacNeil

On Thu, Jul 11, 2002 at 10:28:32AM -0100, Josep M. wrote:
> I´m thinking in put a firewall for protect my home computers,and buy a
> cheaper computer and do firewall using rh73 and iptables,no X
> environement,just basic os for a firewall.
> 
> The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120
> with 48 RAM?

This is more than enough for a firewall machine.  In fact, with ipcop or
some similar firewall distribution you could get by with much less.  I'm
building a firewall right now out of a discarded a 486/100 with 16mb ram
and a 200mb hard drive.

Another possibility is clarkconnect, which is a specially stripped down
version of redhat.  It's a firewall but also comes with intrusion
detection, vpn, apache, samba, mail, etc.  More bells and whistles than
ipcop, but arguably less secure than a dedicated firewall.  The hardware
requirements are a little steeper as well:  486 or higher, 500mb hard
drive, 32-64mb ram, depending on the number of services.

Standard redhat will also work, but it would take some effort to get to
the same place.  It just depends on how hands-on you want to get.

Or you could also just get one of those dedicated firewall/router
combos.  They're quite inexpensive now, but I prefer recycling perfectly
usable older computers that people would otherwise just throw out.  And
I'm not sure how secure these commercial routers are.  I prefer stuff I
can see into and fiddle with.  But ymmv.



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: minimum requirements for a firewall

2002-07-11 Thread Jim Crippen

I'm currently running a Cyrix 233 with 96MB ram on Redhat 7.3 with iptables.
I've installed FreeS/Wan for IPSec VPN to work, have apache 1.3.26 with SSL
and mysql running as well.  I have a squid proxy server for my internal
systems and am using snort/gaurdian to scan and block attackers.  With all
this I still have over 75% resources free.  I'm connected to a cable modem
and an internal 10/100 switch.

I think a 486DX2 with 32MB would be more than sufficient to run just a
firewall with ipchains or iptables.

-Original Message-
From: Bret Hughes [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 11, 2002 9:55 AM
To: [EMAIL PROTECTED]
Subject: Re: minimum requirements for a firewall


On Thu, 2002-07-11 at 06:28, Josep M. wrote:
> Hello.
> 
> I´m thinking in put a firewall for protect my home computers,and buy a
cheaper computer
> and do firewall using rh73 and iptables,no X environement,just basic os
for a firewall.
> 
> The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with
48 RAM?


yep even if you wanted to do an encrypted vpn link.  I found this page
awhile back.  It is vpn specific but should give you some understanding
of requirements.  Bottom line is if all you are going to do is
firewalling then you coupl probab;y keep up with an ADSL link with a
fairly speedy 486.  P120 will give you lots of cycles left to play with.


http://www.freeswan.org/freeswan_trees/freeswan-1.95/doc/performance.html

Bret



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: minimum requirements for a firewall

2002-07-11 Thread Bret Hughes

On Thu, 2002-07-11 at 06:28, Josep M. wrote:
> Hello.
> 
> I´m thinking in put a firewall for protect my home computers,and buy a cheaper 
>computer
> and do firewall using rh73 and iptables,no X environement,just basic os for a 
>firewall.
> 
> The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM?


yep even if you wanted to do an encrypted vpn link.  I found this page
awhile back.  It is vpn specific but should give you some understanding
of requirements.  Bottom line is if all you are going to do is
firewalling then you coupl probab;y keep up with an ADSL link with a
fairly speedy 486.  P120 will give you lots of cycles left to play with.


http://www.freeswan.org/freeswan_trees/freeswan-1.95/doc/performance.html

Bret



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: minimum requirements for a firewall

2002-07-11 Thread Leonard den Ottolander

Hi,

> I'm currently using a P200 w/64MB RAM...similar config, but using 7.2.

 And I am currently using a 486DX2 66MHz with 24 MB RAM, running 6.2 with 
ipchains :). Works fine for me, only ssh logins and sessions are a little 
slow.

> > The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with
> > 48 RAM?

 Probably a 386 has enough power to handle this kind of bandwidth. 16 MB RAM 
will probably do as well, maybe even as little as 8 MB, but then you might 
have some trouble installing ;).

Bye,
Leonard.




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: minimum requirements for a firewall

2002-07-11 Thread Matthew Boeckman

I would say so! My firewall at home is an _old_ P75 with 32MB Ram, 
running 7.1 and ipchains. I have 5 systems behind it that are heavily 
used for a variety of functions. I also use portsentry to dynamically 
update ipchains rules based on portscan attmpts. The load average on 
that firewall never breaks 1.0, and it has been stable as a rock.


Josep M. wrote:
> Hello.
> 
> I´m thinking in put a firewall for protect my home computers,and buy a cheaper 
>computer
> and do firewall using rh73 and iptables,no X environement,just basic os for a 
>firewall.
> 
> The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM?
> 
> Any comment will be appreciated.
> 
> Josep
> 
> 
> 
> 
> 
> ___
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
> 
> 


-- 
Matthew Boeckman(816) 777-2160
Manager - Systems Integration   Saepio Technologies



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: minimum requirements for a firewall

2002-07-11 Thread Mike Burger

I'm currently using a P200 w/64MB RAM...similar config, but using 7.2.

On Thu, 11 Jul 2002, Josep M. wrote:

> Hello.
> 
> I´m thinking in put a firewall for protect my home computers,and buy a cheaper 
>computer
> and do firewall using rh73 and iptables,no X environement,just basic os for a 
>firewall.
> 
> The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM?
> 
> Any comment will be appreciated.
> 
> Josep
> 
> 
> 
> 
> 
> ___
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
> 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: minimum requirements for a firewall

2002-07-11 Thread Stephen Gevers

Ed Wilts wrote:

>On Thu, Jul 11, 2002 at 10:28:32AM -0100, Josep M. wrote:
>  
>
>>Hello.
>>
>>I´m thinking in put a firewall for protect my home computers,and buy a cheaper 
>computer
>>and do firewall using rh73 and iptables,no X environement,just basic os for a 
>firewall.
>>
>>The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM?
>>
>>
>
>I've actually been quite happy using a low-cost Linksys box instead of a
>Linux system.  I used to use a Linux system, but that's another system
>you need to keep up to date with new releases, replace the occasional
>failed hard drive (since you'll probably use an old drive in it) and put
>up with the noise and power requirements.  Several people at work (all
>IT people) came to the same conclusions.
>
>You may want to check out the Linux Router Project if you continue down
>the P120/48 route.
>
>.../Ed
>  
>
As long as you are only doing rudimentary firewalling, that may be true. 
 However, you'll never get the capability or flexibility from a low-cost 
Linksys that you will get from Linux.  I use my Linux box to firewall, 
route and VPN my home network to my brother-in-law's house so that we 
can share files without being exposed to the world.  I had a P66 with 
48MB of RAM perform that function for many years, and I had begun taking 
advantage of  other features of Linux that made my home network easier 
-- such as SAMBA and storing my e-mail on Linux and using an IMAP server 
so that my email was available on any machine in my home network.  I 
finally upgraded to a new system simply because the old mother board and 
case wouldn't allow me to add a tape drive and additional hard drive so 
I could do real backups and Software RAID to safeguard my important data.  

I guess that my point is that if you go the route of the Linksys box, 
you will have a simple firewall/router.  If you find maintaining 
computers a hassle and you don't have any special needs (like my VPN), 
then this will be the easiest solution.  However, if you enjoy being in 
complete control of the environment with an incredible amount of tools 
and resources (such as this list) to help you through, you might find 
that you can take advantage of other things that a Linux machine can do 
for you in addition to simple firewall.

By the way, a previous message suggested that you may have to do a text 
install.  I'm not sure what the comment was based on as I have done 
graphical installs on a great number of machines, without regard to 
whether or not I was installing X.  My suggestion is, if you have the 
disk space for it, go ahead and install X, but don't run the machine in 
run level 5.  Your machine won't take up the resources (I.E. main 
memory) to support the X server, but you will be able to run remote 
commands and display them to another computer running an X server (i.e. 
Windows running Cygwin/XFree86).  That is what I do and I have the Linux 
machine in the basement (where the noise and heat don't bother me) and I 
display a KDE environment on my PC whenever I want to work on it in a 
graphical mode.

Stephen




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: minimum requirements for a firewall

2002-07-11 Thread Ed Wilts

On Thu, Jul 11, 2002 at 10:28:32AM -0100, Josep M. wrote:
> Hello.
> 
> I´m thinking in put a firewall for protect my home computers,and buy a cheaper 
>computer
> and do firewall using rh73 and iptables,no X environement,just basic os for a 
>firewall.
> 
> The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM?

I've actually been quite happy using a low-cost Linksys box instead of a
Linux system.  I used to use a Linux system, but that's another system
you need to keep up to date with new releases, replace the occasional
failed hard drive (since you'll probably use an old drive in it) and put
up with the noise and power requirements.  Several people at work (all
IT people) came to the same conclusions.

You may want to check out the Linux Router Project if you continue down
the P120/48 route.

.../Ed
-- 
Ed Wilts, Mounds View, MN, USA
mailto:[EMAIL PROTECTED]



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: minimum requirements for a firewall

2002-07-11 Thread Emmanuel Seyman

On Thu, Jul 11, 2002 at 10:28:32AM -0100, Josep M. wrote:
> 
> The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120
> with 48 RAM?

You might have to do the install via the text interface and not the
graphic one. Other than that, you're fine.

Emmanuel



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list