Re: minimum requirements for a firewall
On Thu, Jul 11, 2002 at 10:28:32AM -0100, Josep M. wrote: > I´m thinking in put a firewall for protect my home computers,and buy a > cheaper computer and do firewall using rh73 and iptables,no X > environement,just basic os for a firewall. > > The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 > with 48 RAM? This is more than enough for a firewall machine. In fact, with ipcop or some similar firewall distribution you could get by with much less. I'm building a firewall right now out of a discarded a 486/100 with 16mb ram and a 200mb hard drive. Another possibility is clarkconnect, which is a specially stripped down version of redhat. It's a firewall but also comes with intrusion detection, vpn, apache, samba, mail, etc. More bells and whistles than ipcop, but arguably less secure than a dedicated firewall. The hardware requirements are a little steeper as well: 486 or higher, 500mb hard drive, 32-64mb ram, depending on the number of services. Standard redhat will also work, but it would take some effort to get to the same place. It just depends on how hands-on you want to get. Or you could also just get one of those dedicated firewall/router combos. They're quite inexpensive now, but I prefer recycling perfectly usable older computers that people would otherwise just throw out. And I'm not sure how secure these commercial routers are. I prefer stuff I can see into and fiddle with. But ymmv. ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
RE: minimum requirements for a firewall
I'm currently running a Cyrix 233 with 96MB ram on Redhat 7.3 with iptables. I've installed FreeS/Wan for IPSec VPN to work, have apache 1.3.26 with SSL and mysql running as well. I have a squid proxy server for my internal systems and am using snort/gaurdian to scan and block attackers. With all this I still have over 75% resources free. I'm connected to a cable modem and an internal 10/100 switch. I think a 486DX2 with 32MB would be more than sufficient to run just a firewall with ipchains or iptables. -Original Message- From: Bret Hughes [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 11, 2002 9:55 AM To: [EMAIL PROTECTED] Subject: Re: minimum requirements for a firewall On Thu, 2002-07-11 at 06:28, Josep M. wrote: > Hello. > > I´m thinking in put a firewall for protect my home computers,and buy a cheaper computer > and do firewall using rh73 and iptables,no X environement,just basic os for a firewall. > > The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM? yep even if you wanted to do an encrypted vpn link. I found this page awhile back. It is vpn specific but should give you some understanding of requirements. Bottom line is if all you are going to do is firewalling then you coupl probab;y keep up with an ADSL link with a fairly speedy 486. P120 will give you lots of cycles left to play with. http://www.freeswan.org/freeswan_trees/freeswan-1.95/doc/performance.html Bret ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: minimum requirements for a firewall
On Thu, 2002-07-11 at 06:28, Josep M. wrote: > Hello. > > I´m thinking in put a firewall for protect my home computers,and buy a cheaper >computer > and do firewall using rh73 and iptables,no X environement,just basic os for a >firewall. > > The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM? yep even if you wanted to do an encrypted vpn link. I found this page awhile back. It is vpn specific but should give you some understanding of requirements. Bottom line is if all you are going to do is firewalling then you coupl probab;y keep up with an ADSL link with a fairly speedy 486. P120 will give you lots of cycles left to play with. http://www.freeswan.org/freeswan_trees/freeswan-1.95/doc/performance.html Bret ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: minimum requirements for a firewall
Hi, > I'm currently using a P200 w/64MB RAM...similar config, but using 7.2. And I am currently using a 486DX2 66MHz with 24 MB RAM, running 6.2 with ipchains :). Works fine for me, only ssh logins and sessions are a little slow. > > The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with > > 48 RAM? Probably a 386 has enough power to handle this kind of bandwidth. 16 MB RAM will probably do as well, maybe even as little as 8 MB, but then you might have some trouble installing ;). Bye, Leonard. ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: minimum requirements for a firewall
I would say so! My firewall at home is an _old_ P75 with 32MB Ram, running 7.1 and ipchains. I have 5 systems behind it that are heavily used for a variety of functions. I also use portsentry to dynamically update ipchains rules based on portscan attmpts. The load average on that firewall never breaks 1.0, and it has been stable as a rock. Josep M. wrote: > Hello. > > I´m thinking in put a firewall for protect my home computers,and buy a cheaper >computer > and do firewall using rh73 and iptables,no X environement,just basic os for a >firewall. > > The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM? > > Any comment will be appreciated. > > Josep > > > > > > ___ > Redhat-list mailing list > [EMAIL PROTECTED] > https://listman.redhat.com/mailman/listinfo/redhat-list > > -- Matthew Boeckman(816) 777-2160 Manager - Systems Integration Saepio Technologies ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: minimum requirements for a firewall
I'm currently using a P200 w/64MB RAM...similar config, but using 7.2. On Thu, 11 Jul 2002, Josep M. wrote: > Hello. > > I´m thinking in put a firewall for protect my home computers,and buy a cheaper >computer > and do firewall using rh73 and iptables,no X environement,just basic os for a >firewall. > > The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM? > > Any comment will be appreciated. > > Josep > > > > > > ___ > Redhat-list mailing list > [EMAIL PROTECTED] > https://listman.redhat.com/mailman/listinfo/redhat-list > ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: minimum requirements for a firewall
Ed Wilts wrote: >On Thu, Jul 11, 2002 at 10:28:32AM -0100, Josep M. wrote: > > >>Hello. >> >>I´m thinking in put a firewall for protect my home computers,and buy a cheaper >computer >>and do firewall using rh73 and iptables,no X environement,just basic os for a >firewall. >> >>The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM? >> >> > >I've actually been quite happy using a low-cost Linksys box instead of a >Linux system. I used to use a Linux system, but that's another system >you need to keep up to date with new releases, replace the occasional >failed hard drive (since you'll probably use an old drive in it) and put >up with the noise and power requirements. Several people at work (all >IT people) came to the same conclusions. > >You may want to check out the Linux Router Project if you continue down >the P120/48 route. > >.../Ed > > As long as you are only doing rudimentary firewalling, that may be true. However, you'll never get the capability or flexibility from a low-cost Linksys that you will get from Linux. I use my Linux box to firewall, route and VPN my home network to my brother-in-law's house so that we can share files without being exposed to the world. I had a P66 with 48MB of RAM perform that function for many years, and I had begun taking advantage of other features of Linux that made my home network easier -- such as SAMBA and storing my e-mail on Linux and using an IMAP server so that my email was available on any machine in my home network. I finally upgraded to a new system simply because the old mother board and case wouldn't allow me to add a tape drive and additional hard drive so I could do real backups and Software RAID to safeguard my important data. I guess that my point is that if you go the route of the Linksys box, you will have a simple firewall/router. If you find maintaining computers a hassle and you don't have any special needs (like my VPN), then this will be the easiest solution. However, if you enjoy being in complete control of the environment with an incredible amount of tools and resources (such as this list) to help you through, you might find that you can take advantage of other things that a Linux machine can do for you in addition to simple firewall. By the way, a previous message suggested that you may have to do a text install. I'm not sure what the comment was based on as I have done graphical installs on a great number of machines, without regard to whether or not I was installing X. My suggestion is, if you have the disk space for it, go ahead and install X, but don't run the machine in run level 5. Your machine won't take up the resources (I.E. main memory) to support the X server, but you will be able to run remote commands and display them to another computer running an X server (i.e. Windows running Cygwin/XFree86). That is what I do and I have the Linux machine in the basement (where the noise and heat don't bother me) and I display a KDE environment on my PC whenever I want to work on it in a graphical mode. Stephen ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: minimum requirements for a firewall
On Thu, Jul 11, 2002 at 10:28:32AM -0100, Josep M. wrote: > Hello. > > I´m thinking in put a firewall for protect my home computers,and buy a cheaper >computer > and do firewall using rh73 and iptables,no X environement,just basic os for a >firewall. > > The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 with 48 RAM? I've actually been quite happy using a low-cost Linksys box instead of a Linux system. I used to use a Linux system, but that's another system you need to keep up to date with new releases, replace the occasional failed hard drive (since you'll probably use an old drive in it) and put up with the noise and power requirements. Several people at work (all IT people) came to the same conclusions. You may want to check out the Linux Router Project if you continue down the P120/48 route. .../Ed -- Ed Wilts, Mounds View, MN, USA mailto:[EMAIL PROTECTED] ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: minimum requirements for a firewall
On Thu, Jul 11, 2002 at 10:28:32AM -0100, Josep M. wrote: > > The speed of my ADSL is 256 Kb/s ,will be enough with a Pentium-120 > with 48 RAM? You might have to do the install via the text interface and not the graphic one. Other than that, you're fine. Emmanuel ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list