[KLUG Members] A plea for firewall ideas

[Bruce Smith]

> >Both of my company's DNS servers run BIND
> 
> We dumped BIND for our Linux standard and picked up DJBDNS, from the same
> developer as Q-Mail. Takes a bit to convert brain cycles to understand his
> style of DNS server, beyond that it is working great now.
> 
> http://cr.yp.to/djbdns.html

djbdns is also included in Devil-Linux, but I choose to run BIND.

> As well, our Debian based firewall also uses about 31/32 MB of RAM.

Will it boot and run on a machine with only 32MB?

> We are going to run some IDS on there as well, so the extra memory / CPU in
> standard PC's today will not go to waste. Snort and the like...

Snort is also included in Devil-Linux.  ;-)

> The various technologies added to Devil Linux can be added to other distros as
> well, as usual a Distro is merely a grouping of technologies / starting point
> to build your box.

Absolutely.

I like the ability to run without a hard drive when it's not needed.
I don't like the high point of failure, heat, noise and power
consumption.

 - BS