7/13 I'm thinking about getting a Soekris 4501 to replace my the P2-400
that is currently acting as my home firewall. Has anyone used a
Soekris system for this purpose? If so, how well does it work? Also,
if there are any alternatives (similar power/form factor), I would
appreciate links to those as well. tia.
\_ John got me to use a WRAP box similar to Soekris. I use this one:
http://www.pcengines.ch/wrap1e203.htm
and run m0n0wall on it. It works very well for its purpose. You
should consider what you want out of a firewall. If all you want
is just a simple packet filter, you can probably get away with
buying one of the Linksys WRT54 clones for under $100 and flashing
the firmware with what you want. The newer models are fast enough
to handle some VPN tunnels as well. You can just disable the wifi
and use just the wired ports. Sure, you can do packet filtering
firewall with these without flashing the firmware, but the default
firmwares generally only restrict incoming packets and not outgoing.
\_ Well, I've been using OpenBSD for years and I don't really want
to switch to something like a WRT54 b/c I don't really trust it
(or Linux). I was basically looking for something I could run
OpenBSD on that didn't use a lot of power.
\_ One thing to keep in mind if you are putting in your own
installation on these boxes is the compact flash write
count. So you should consider what type of write access
you'll be making in your setup. I do not know if
the CF microdrives would be any better in that respect.
I must admit, that once I learned to use PF (on FreeBSD),
netfilter/ipnat annoys me more than they used to.
\_ Yeah, I read about how to manage CF write count by
mostly using memory fs for any rw partition. That
will be fine for what I'm doing. I hardly every
change the system after install. |
http://csua.com/feed/