ABXZone Computer  Forums



Welcome to the ABXZone Computer Forums forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact contact us.

Reply
 
LinkBack Thread Tools Display Modes
Old 10-03-2004, 06:34 PM   #1
Resident ABX Wizard
 
Fraoch's Avatar
 
Join Date: May 2003
Location: London, Ontario
Posts: 8,814
Testing Linux firewalls

With the construction of my third computer made out of old parts, I'm looking to turn it into a Linux firewall.

So far I've tested Coyote Linux and LEAF "Bering".

I was not impressed with Coyote. Perhaps there's more going on under the hood but it didn't seem like there was much to configure on the user side. Maybe it doesn't let you play with it much when you don't have the right hardware configuration since I only have one NIC at this point.

LEAF "Bering" seems fantastic though. There are lots of configuration options. It isn't really all that complicated either. Everything is set by editing configuration files and there's full commented-out instructions as to how to modify the file. The Linux-specific instructions are a little tough, but that's merely due to my Linux n00bishness. n00bosity?

I was going to try Sisela but since it's entirely command-line driven, I doubt if I'll have the skills to run it. Also it's a multipurpose app, not a dedicated firewall like Coyote or Bering.
(Offline)   Reply With Quote
Old 10-03-2004, 08:58 PM   #2
Registered User
 
barureddy's Avatar
 
Join Date: Jun 2002
Location: Nashville
Posts: 1,414
Coyote I find is very configurable, but that must be after the fact and you must do it manually.

I have not used leaf, but it seems very nice.
(Offline)   Reply With Quote
Old 10-04-2004, 11:10 AM   #3
Xen now Citrix's
 
switch_abx's Avatar
 
Join Date: Feb 2001
Posts: 2,609
Did you give it a try with SuseFireWall2, which is inlcuded in SLES 9 and in 9.1 Pro? I think this is a SUSE brewed Firewall.
(Offline)   Reply With Quote
Old 10-04-2004, 12:08 PM   #4
Resident ABX Wizard
 
Fraoch's Avatar
 
Join Date: May 2003
Location: London, Ontario
Posts: 8,814
Since this machine uses an old CD-ROM that can't read CD-Rs (or DVDs like SUSE came on) I won't be able to load SUSEFireWall2 onto it.

So far I still like LEAF "Bering" but I have to read up on it.
(Offline)   Reply With Quote
Old 10-04-2004, 12:52 PM   #5
The race for quality has no finish line- so technically, it's more like a death march.
 
Join Date: Feb 2001
Posts: 18,159
Have ya tried SmoothWall or ClarkConnect?
__________________

(Offline)   Reply With Quote
Old 10-04-2004, 02:40 PM   #6
Resident ABX Wizard
 
Fraoch's Avatar
 
Join Date: May 2003
Location: London, Ontario
Posts: 8,814
Quote:
Originally Posted by pointreyes
Have ya tried SmoothWall or ClarkConnect?
Saw SmoothWall, didn't try it because it has to be burned to a CD which the old CD-ROM wouldn't be able to read.

Never heard about ClarkConnect but it looks good - it can be network installed for one thing! It has a floppy disk installer and will get the files over the network.
(Offline)   Reply With Quote
Old 10-08-2004, 01:56 AM   #7
Resident ABX Wizard
 
Fraoch's Avatar
 
Join Date: May 2003
Location: London, Ontario
Posts: 8,814
Quote:
Originally Posted by pointreyes
Have ya tried SmoothWall or ClarkConnect?
THANK YOU so much for pointing me to ClarkConnect! It was perfect - network install (no CD required!), a very basic terminal application running on the Linux box, but the entire thing is managed from a web interface! Exactly what I wanted - a powerful firewall running on old hardware with an excellent front-end. And I can even hide the hardware - the console's monitor and keyboard are only needed in emergencies.

No need for Linux command line instructions, although the utility is there should you need it.

The web interface is both beautiful and powerful and "disguises" the fact that it resides on discarded parts. It looks like a high-end system instead. It's also upgradeable right from the interface.

Full details, including screenshot here.

I don't have it up as a firewall/gateway yet but in standalone mode it's working fine.
(Offline)   Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



Powered by vBulletin® Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.0.1
vBulletin Skin developed by: vBStyles.com