Re: followup on m0n0wall

2006-02-10 Thread Ted Roche
On Feb 10, 2006, at 12:30 PM, Ben Scott wrote: Why not? I thought you were a consultant? Remember the consultant motto: If you're not part of the solution, there's good money to be made in prolonging the problem. ;-) Grr. You know, it's that 90% of consultants that give the rest of us

Re: followup on m0n0wall

2006-02-10 Thread Ben Scott
On 2/10/06, Bill McGonigle <[EMAIL PROTECTED]> wrote: > ... I don't want to own the solution. Why not? I thought you were a consultant? Remember the consultant motto: If you're not part of the solution, there's good money to be made in prolonging the problem. ;-) -- Ben _

Re: followup on m0n0wall

2006-02-10 Thread Bill McGonigle
On Feb 10, 2006, at 07:30, Ben Scott wrote: Can you switch to a routed configuration by using CIDR subnets unfortunately no, they have a few machines peppered at both ends of their netblock. and/or NAT'ing the DMZ addresses (thereby eliminating the need to do much, if any, IP reconfigura

Re: followup on m0n0wall

2006-02-10 Thread Ben Scott
On 2/9/06, Bill McGonigle <[EMAIL PROTECTED]> wrote: > This client has their DMZ IP's bridged to the WAN connection, so > their servers have real IP addresses, not NAT'ed addresses. This > is for historical reasons but it's so ingrained that short of their ISP > and its netblocks going poof, it's

followup on m0n0wall

2006-02-09 Thread Bill McGonigle
This is a followup on the MonadLUG meeting a few months back on open source firewalls. I was particularly impressed with m0n0wall from the talk and have installed it at a small office and it works great. They have an XML config file, boot from CD (config on floppy/flash) and a very nice GUI.