Matt W. wrote:
Besides, you'll have a much easier time getting OpenBSD on an old computer
like that P60.  If you go with OpenBSD, I can pass on a comprehensive
pf.conf (packet filter) for OpenBSD 3.2 and later.  Haven't messed with
their traffic-shaper, sorry.

I'll vouch for OpenBSD's traffic shaper. I finally got around to replacing my FreeBSD firewall with OpenBSD 3.2 (<= 3.1 didn't support one of my ethernet cards) and I'm very impressed. I've got a pretty complicated network at home with an external network, a DMZ, a trusted internal network, and an untrusted internal network (for the neighbors). Because FreeBSD uses a userland NAT daemon and its ipfw doesn't support multiple rulesets, I never did get a firewall configuration that I really liked. However, OpenBSD's packet filter, NAT and the the traffic shaper were all really easy to set up, and yet can do everything exactly as I want it. I don't think you can get a better firewall, especially if you're on a lower-end system.


--
Soren Harward
[EMAIL PROTECTED]



____________________
BYU Unix Users Group http://uug.byu.edu/ ___________________________________________________________________
List Info: http://phantom.byu.edu/cgi-bin/mailman/listinfo/uug-list

Reply via email to