[Techtalk] BSD/Linux - firewall questions

[James]

I believe the old lore is that a 486 50mhz w/ 8meg of RAM can saturate a
T1 while doing ipmasq.

- James

-----Original Message-----
From: techtalk-admin at linuxchix.org [mailto:techtalk-admin at linuxchix.org]
On Behalf Of Conor Daly
Sent: Sunday, November 25, 2001 5:59 AM
To: techtalk at linuxchix.org
Subject: Re: [Techtalk] BSD/Linux - firewall questions

On Fri, Nov 23, 2001 at 10:38:11AM -0500 or so it is rumoured
hereabouts, 
Michelle Murrain thought:
> At 04:48 PM 11/21/2001, jenn at simegen.com wrote:
> >Get a couple of cheap 486s, install one of the *BSDs with a built in 
> >firewall. (Ok, Linux can do it too.) Put one between your server and
the 
> >Internet. Put the other between your server and the rest of your
> >home network.
<SNIP> 
> So - my plan is to create a DMZ, with 2 firewall boxes  - and the
question 
> is, should I go Linux, BSD? And is a 486 truly enough to do the trick?

I'm running my firewall on a 486DX/66 w 16Mb RAM.  It runs ipchains/masq
and
diald and connects via 56k dialup.  My only beef is that it takes about
90
seconds to bring up the firewall at each dialup (this is necessary since
I
get a different IP each time I connect).  Otherwise it seems to behave
just fine.  The ipmasq or the firewall HOWTO (don't remember which)
claims
to have had, IIRC, an old 386 w 4Mb keep a T1 full (or maybe it was a
486).

Conor
-- 
Conor Daly <conor.daly at oceanfree.net>

Domestic Sysadmin :-)
---------------------
Faenor.cod.ie
 10:41am  up 1 day, 18:43,  0 users,  load average: 0.08, 0.02, 0.01
Hobbiton.cod.ie
 10:51am  up 58 days, 18:27,  3 users,  load average: 0.00, 0.00, 0.00
_______________________________________________
Techtalk mailing list
Techtalk at linuxchix.org
http://www.linuxchix.org/mailman/listinfo/techtalk