Firewall OS

[jfiorini]

Hi.
I'm about to set up a firewall, and I am wondering what OS would be best to use. I'm in the process of downloading NetBSD, because I know that it's very stable and very, very secure. Also, any advice on what software to use for configuring the firewall would be appreciated.

Thank you,
Joe Fiorini

 

[ttn1]

Check out smoothwall, LRP, or some other distro of linux specifically for firewalling.

Installing a full distro and turning it into a good firewall can be a daunting task.

I use LRP and it works very well. I showed some friends smoothwall and now they use it exclusively.

 

[DnetMHZ]

Take a look at OpenBSD

DnetMHZ

 

[Techwhore]

Installing a full distro and turning it into a good firewall can be a daunting task.

Couldn't agree more...

I use Clark Connect and LOVE it. Easiest install and setup EVER... yes, even easier than an MS OS!

I've also looked into Mandrake SNF and seems very respectable, you can get that at Mandrake.com

Some people have said Freesco is a good place to turn for firewalling as well, it's my understanding that Freesco can fit on a floppy and is relatively easy to configure.

 

[ttn1]

<< Some people have said Freesco is a good place to turn for firewalling as well, it's my understanding that Freesco can fit on a floppy and is relatively easy to configure. >>



This is true. Both LRP and Freesco are firewalls that are designed to fit on a floppy. They run entirely in memory, so the floppy can be removed
when the machine is running. That way if your firewall is ever hacked, you just pop in the floppy and reboot.

Smoothwall requires 30MB of harddrive space, but you get a very easy to use web-based configuration tool.

LRP and Freesco can run on minimal hardware. We're talking 486 with 16MB of ram. They even run OK on 386 machines.

 

[n0cmonkey]

<< Take a look at OpenBSD

DnetMHZ >>



Definitely OpenBSD. If you want a book to go along with it, get a copy of "Building OpenBSD and Linux Firewalls". Its a great book, but you will need OpenBSD 2.9 instead of the recently released 3.0.

 

[Garion]

Want the honest truth? Don't go with an OS-based firewall. No matter how great the OS is, someone's going to find a security hole in it in the next few months. If this is a business, you're MUCH better off with a real firewall based on something like Watchguard, SonicWall, Nokia or Cisco PIX. Far more secure, WAY faster, and easier to manage. For most home use, a standard SOHO router you can buy for $50 outperforms a OS-based firewall and is easier to deal with (Not to mention saving serious $$ on the electric bill!)

- G

 

[n0cmonkey]

<< Want the honest truth? Don't go with an OS-based firewall. No matter how great the OS is, someone's going to find a security hole in it in the next few months. If this is a business, you're MUCH better off with a real firewall based on something like Watchguard, SonicWall, Nokia or Cisco PIX. Far more secure, WAY faster, and easier to manage. For most home use, a standard SOHO router you can buy for $50 outperforms a OS-based firewall and is easier to deal with (Not to mention saving serious $$ on the electric bill!)

- G >>



For an office or my parents I would choose a SOHO router or Cisco PIX. But for myself on my home connection OpenBSD is a better solution. Security of firewalls is fairly subjective. Any system out there has holes, unfortunately OpenBSD has holes and problems. Some have not been found, and some of the holes that have been found are not public. Generally the home routers do not have the functionality many people would be looking for. Customization is definitely something to look at, but this depends on your needs. Faster? Maybe. It depends on your hardware. Easier to manage? Again, depends on what you know. If you want to learn a UNIX, grab OpenBSD and play with that. If you want something that just works, definitely go with something like a linksys router. There is no good answer to these questions, but just more questions that will help you search for the best solution for you.



EDIT: for clarity and "Ive woken up now so Im not in a bad mood"