[KLUG Members] A plea for firewall ideas

[Adam Tauno WIlliams]

> OK, I have to say it:   http://www.devil-linux.org/
> It also runs off read-only media, which makes it impossible to root. 
> You can run from CDROM, or from a write-protected USB memory stick and
> build a firewall without any moving parts.

Although I've never used Devil Linux, I have it on very good authority [
:) ] that is is an excellent choice.  The no-moving-parts aspect is very
nice.

> And there is even a rumor of a Devil Linux developer lurking on KLUG
> mailing lists!  ;-)

Does he know if it has an administrative interface yet?

And does it support remote logging?

> OTOH, if you need NOTHING but firewall, routing and DHCP (no SSH 
> access, no VPN, no nothing), take a look at floppy-firewall
> (FloppyFW).

I use floppyfw alot for small sites that don't require a sophisticated
setup or lots of logging.  I've heard that you can actually manage a
floppy firewall with fwbuilder by installing a little daemon;  haven't
tried it but it sounds like a good ware to build AND MANAGER a 'cluster'
of firewalls.