RE: Need advise for a linux firewall

2010-03-12 Thread Dennis Burgess
: Abdul Nazeer; nanog@nanog.org Subject: Re: Need advise for a linux firewall Microtik makes a pretty robust Linux based firewall appliance-on-a-usb-stick. It does a lot out of the box like BGP, VPN, MPLS,QoS and all kinds of other crazy things you wouldn't expect to fit on one gig of flash. It takes my

Need advise for a linux firewall

2010-03-11 Thread Abdul Nazeer
Looking for advise on setting up a linux based dedicated firewall. Apparently, there are plenty: http://en.wikipedia.org/wiki/List_of_router_or_firewall_distributions I'm looking to have the firewall sit in front of a public network of windows boxes. Also, would want to be able to load-balance

Re: Need advise for a linux firewall

2010-03-11 Thread Aaron Urbain
fwbuilder

Re: Need advise for a linux firewall

2010-03-11 Thread Mirko Maffioli
try http://www.zeroshell.net/eng/ 2010/3/11 Abdul Nazeer voipu...@optonline.net: Looking for advise on setting up a linux based dedicated firewall. Apparently, there are plenty: http://en.wikipedia.org/wiki/List_of_router_or_firewall_distributions I'm looking to have the firewall sit in

Re: Need advise for a linux firewall

2010-03-11 Thread gordon b slater
On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: iptables, but if anyone has any other suggestion, I'd love to hear it. PFsense, (being freeBSD-based, comes under your other category) It uses the OpenBSD-based pf firewall, with a web-based GUI for almost everything (except maybe console

Re: Need advise for a linux firewall

2010-03-11 Thread Marty Anstey
PFsense, (being freeBSD-based, comes under your other category) It uses the OpenBSD-based pf firewall, with a web-based GUI for almost everything (except maybe console resets). works for me in several locations, some `heavy and high`. +1 for pfsense. I've been running it for over 18

Re: Need advise for a linux firewall

2010-03-11 Thread gordon b slater
On Thu, 2010-03-11 at 09:01 -0800, Marty Anstey wrote: +1 for pfsense. I've been running it for over 18 months with no problems whatsoever. It does everything I needed it to do, and quite a bit more. actually, reading back on the nanog list for a few plays (playing catch-up here) pfsense

Re: Need advise for a linux firewall

2010-03-11 Thread Ronald Cotoni
On Thu, Mar 11, 2010 at 12:06 PM, gordon b slater gordsla...@ieee.org wrote: On Thu, 2010-03-11 at 09:01 -0800, Marty Anstey wrote: +1 for pfsense. I've been running it for over 18 months with no problems whatsoever. It does everything I needed it to do, and quite a bit more. actually,

Re: Need advise for a linux firewall

2010-03-11 Thread Abdul Nazeer
On 03/11/2010 11:22 AM, gordon b slater wrote: On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: iptables, but if anyone has any other suggestion, I'd love to hear it. PFsense, (being freeBSD-based, comes under your other category) It uses the OpenBSD-based pf firewall, with a

Re: Need advise for a linux firewall

2010-03-11 Thread Jim Miller
On Thu, Mar 11, 2010 at 11:56 PM, Abdul Nazeer voipu...@optonline.netwrote: On 03/11/2010 11:22 AM, gordon b slater wrote: On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: iptables, but if anyone has any other suggestion, I'd love to hear it. PFsense, (being freeBSD-based,

Re: Need advise for a linux firewall

2010-03-11 Thread Will Clayton
Microtik makes a pretty robust Linux based firewall appliance-on-a-usb-stick. It does a lot out of the box like BGP, VPN, MPLS,QoS and all kinds of other crazy things you wouldn't expect to fit on one gig of flash. It takes my HP about 10 seconds to load a full table. My vote is for PFSense

Re: Need advise for a linux firewall

2010-03-11 Thread Bryan Irvine
On Thu, Mar 11, 2010 at 11:26 AM, Abdul Nazeer voipu...@optonline.net wrote: On 03/11/2010 11:22 AM, gordon b slater wrote: On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: iptables, but if anyone has any other suggestion, I'd love to hear it. PFsense, (being freeBSD-based, comes  

Re: Need advise for a linux firewall

2010-03-11 Thread Daniel Staal
--As of March 11, 2010 4:22:38 PM +, gordon b slater is alleged to have said: One caveat for the current PFsense: traffic shaping in 1.2.3 release is somewhat borked (1.2.2 works much better) and it doesn't work with more than 2 interfaces, so 1 wan - 1 lan is OK. --As for the rest, it

RE: Need advise for a linux firewall

2010-03-11 Thread Mark Scholten
-Original Message- From: Daniel Staal [mailto:dst...@usa.net] Sent: Friday, March 12, 2010 1:37 AM To: nanog@nanog.org Subject: Re: Need advise for a linux firewall --As of March 11, 2010 4:22:38 PM +, gordon b slater is alleged to have said: One caveat for the current