Need advise for a linux firewall

Fri Mar 12 14:51:17 UTC 2010

Can't go wrong with RouterOS.  The whole OS will boot on a 32meg drive
if you needed it too. Contact us if you need hardware/software :) 

-----------------------------------------------------------
Dennis Burgess, CCNA, Mikrotik Certified Trainer, MTCNA, MTCRE, MTCWE,
MTCTCE, MTCUME 
Link Technologies, Inc -- Mikrotik & WISP Support Services
Office: 314-735-0270 Website: http://www.linktechs.net
LIVE On-Line Mikrotik Training - Author of "Learn RouterOS"

-----Original Message-----
From: Will Clayton [mailto:w.d.clayton at gmail.com] 
Sent: Thursday, March 11, 2010 5:54 PM
To: Jim Miller
Cc: Abdul Nazeer; nanog at nanog.org
Subject: Re: Need advise for a linux firewall

Microtik makes a pretty robust Linux based firewall
appliance-on-a-usb-stick. It does a lot out of the box like BGP, VPN,
MPLS,QoS and all kinds of other crazy things you wouldn't expect to fit
on
one gig of flash. It takes my HP about 10 seconds to load a full table.

My vote is for PFSense though. PF is a lot of fun itself and I have seen
awesome throughput with no load on very low end hardware.

On Thu, Mar 11, 2010 at 1:45 PM, Jim Miller <stljim at gmail.com> wrote:

> On Thu, Mar 11, 2010 at 11:56 PM, Abdul Nazeer <voipuser at optonline.net
> >wrote:
>
> > On 03/11/2010 11:22 AM, gordon b slater wrote:
> > > On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote:
> > >
> > >
> > >> iptables, but if anyone has any other suggestion, I'd love to
hear it.
> > >>
> > > PFsense, (being freeBSD-based, comes  under your "other" category)
> > > It uses the OpenBSD-based pf firewall, with a web-based GUI for
almost
> > > everything (except maybe console resets). works for me in  several
> > > locations, some `heavy and high`.
> > >
> > Looks interesting. Will give it a shot, thanks!
> >
> > For a very long time I used the following setup with great success:
> 1. Debian based linux for the firewall box.  With Debian you can do a
very
> light setup.
> 2. FWBuilder to builder for the GUI front end.  It's been around for
quite
> a
> long time now and has built in RCS for revision control.
> 3. Quagga for OSPF routing.. We only had about .. 4-5 firewalls but
made a
> lot of internal routing changes and OSPF _really_ made things easy
when we
> made changes
> 4. OpenVPN for after-hours access and off-site staff access.
>
> Anyway, just my $0.02
>
> --Jim
>