[KLUG Members] Which Linux Firewall?

Adam Williams members@kalamazoolinux.org
03 Jan 2002 16:57:49 -0500


>This is way to good of a machine for a firewall of a small network.  Maybe to good is not
>the right statement but it is a little overkill.  A 120Mhz machine is what I use to

I agree 100%.  If you want "real" security you need a stand alone
firewall.  Using such a powerful machine as a firewall on a small
network just doesn't make sense.  Buy a $50 clunker.

>connect my internal lan to the internet with a cable modem.  If you want simple, Bruce
>just did a demo on smoothewall which looked very capable to me.  I really like the idea of
>an easily configured ipsec.  If your looking for anything from simple to complex as you
>want to get with the most recent kernel capable of behaving as a stateful firewall, I'd
>suggest iptables from the 2.4 kernel series.
>http://www.kalamazoolinux.org/presentations/20010417/

I use floppyfw so the firewall doesn't need a harddisk,  maximizing
availability.  With a little extra ventilation you can disable the PS
fan as well, leaving you with no moving parts.