486 as firewall, crappy or what?

[birdy]

What do you mean ONLY 512Kbps!!!

LRP seems to be a router only. I know i am probably asking too much for the pc to be able to manage a firewall aswell. Thing is that if i dont have a firewall on the router i will have to install a software one on all the pcs connected to the network. in which case i may aswell have one of the other pcs connected directly to the net acting as a firewall and a router.

I was hoping for the following setup:

internet
|
|
Firewall/router
|
|
8 port switch 10/100
|
|
the rest including a server

[Guru]

Have a look over here for a beter explanation of what it does!http://master-beta.linuxrouter.org:8080/

Linux Router Features
Multi Interface: Ethernet, WAN (DS1+), Wireless, ISDN, Serial, Parallel

Multi Protocol: RIP in base, BGP IP-IP OSPF and others via packages
IP Control: Policy firewall, IP Masquerade (NAT), port redirection, port translation, port load balancing, transparent proxy, numberless interface spanning, interface load balancing, interface aliasing

Advanced Routing: IPX, Token Ring, Tunneling, Crypto VPN, traffic limiting and shaping, policy based

Traffic Monitoring: SNMP monitoring of all interfaces, TCPDump

Compatibility: Guaranteed IPv6 upgrade path. Follows non-proprietary open standards. Continually updated. You will never out grow it

Open Hardware Use standard modular PC components. Easy redundancy. Uses 1.44 Floppy, ZIP, LS-120, Flash RAM, Hard Drive or anything linux can boot and mount. Can also do remote bootstrap using BOOTPC

Modular Design Packaging system allows easy addition and removal of features

Solid State Default configuration runs solid state out of ram. No FS to corrupt. Changes are backed up to the boot medium. Large volumes can be opened remotely with SMB or NFS.

POSIX feel Nothing new to learn. Works like a full unix system. Takes the Best of BSD and SysV. Full sh and sed scripting.

Secure Small and light. Less to worry about, less to break. Easy to administer. Secure Shell (ssh) and Secure Copy support.

Support Vast resources, and HOW-TO's. Active mailing list. Commercial software support and hardware solutions available.

Flexible Run any combination of: Router, Firewall, Switch, RADIUS terminal server, web server, and more. LRP is also usable for non-router applications: VNC Terminal, X Terminal, Rescue System, or ANYTHING else you can fit on your boot disk. LRP is REAL LINUX!

FREE & OPEN 100% Source available of base. Source available for most packages. You are able to do ANYTHING you are willing to put the time in to do.

How does it work?

The boot medium contains a linux kernel, generic root archive, and package archives of addtional features to be merged with the rest of the root at boot time. (such as PPP, snmp, RADIUS support, etc) When the disk is booted these archives are uncompressed and extracted into a ramdrive (/dev/ram0) then the ramdrive is mounted as root. The entire system runs solid state from ram. Any changes made to the root must be backed up to the boot medium, or they will be lost after a reboot. The procedure to back up is menu based, and if need be, can be automated to take place at regular intervals.

EDIT: Also check out this page http://lrp.ramhb.co.nz/

[Wombat]

birdy, do you already have your switch?

If not, well, many routers have walling built-in these days. And that will reduce your hops.

[Dr Mordrid]

This is what I get using the Linksys Cable/DSL router/switch/NAT firewall/DHCP server;



Advertised maximum speed of my provider: 1500 down/300 up.

1 port switched 10/100 version: ~$65 USD.

4 port switched 10/100 version: ~$80 USD.

It can also share an internet connection among up to 253 computers.

I've had one running 24/7 for well over a year and the security test sites still show it fully stealthed.

It also uses a helluva lot less power than a computer doing the same thing.

Dr. Mordrid

[giskard]

This might be worth looking at...

http://people.freebsd.org/~picobsd/picobsd.html

From the site:
"PicoBSD is a one floppy version of FreeBSD 3.0-current, which in its different variations allows you to have secure dialup access, small diskless router or even a dial-in server. And all this on only one standard 1.44MB floppy. It runs on a minimum 386SX CPU with 8MB of RAM (no HDD required!). "

Should work with cable as well.

Also, instead of shelling out for new generic isa nics, grab a couple of second hand 3Com 3905's. I've bought a couple of dozen at around 2 bucks each. Can't go wrong...

[birdy]

DM, where did you get your router/etc/etc/etc from? I dont know anywhere that sells Linksys stuff over here. Anyone?
I already have my switch so i could go for a single port version

I would prefer to use a pukka hardware solution like that rather than messing around with old comps. although the idea of having four comps does appeal

[Dr Mordrid]

Try Amazon.com UK for a 4 port;

http://www.amazon.co.uk/exec/obidos/ASIN/B00005KAC7/qid=1002763243/sr=1-3/ref=sr_sp_re/202-4218624-6459013

On this side of the pond they're in just about every store that carries computer stuff.

Dr. Mordrid

[birdy]

I have found a place that sells them here in the UK. They are charging about 85 pounds (120 us) for either the four or one port. This is from buy.com I am going to have another look around though when i get the time. I am not used to paying retail prices for computer parts so it comes as a bit of a shock how expensive things are form other suppliers

I will post an update when i find one at a reasonable price.

Cheers

[birdy]

I ordered one of those routers from Buy.com for £70 plus VAT. I know it was a bit expensive but i had a look round and couldnt find it anywhere else. Delivery is about 2 weeks. It's a shame it's taking so long cos my cable modem turned up this morning!!

I have been basking in the glory of 80KB/s downloads. Lovely

[Dr Mordrid]

Yell if you need some handholding to install it, but Linksys has a very good DIY page you should try first.

BTW: Linksys has a new firmware version, 1.40.1, that includes ZoneAlarm Pro and PCCillin 2000 support in the firmware. They are offering a bundle now where you get both for $79.90 with four licenses.

Here's the dialog in the routers internal "web site" control;



Dr. Mordrid

[birdy]

nothing like belt and braces is there

I'll have to think about that one mate. I use zonealarm at the moment and find it to be pretty good. I'll let you know how i get on with the router when it eventually shows up

[birdy]

the router turned up today. i am a very hapy bunny now that i only need 1 nic in my main pc. It was installed within ten minutes.

Seems to be a very good poiece of kit. Thanks for the tip DM

[Dr Mordrid]

You're welcome

IMHO that Linksys router is one of the best pieces of hardware I've bought in years. Got it well over a year ago and it's been on 24/7/365 without even a hiccup.

Dr. Mordrid

[xortam]

I bought one of those Linksys routers (4 port including 1 USB port) but I had to return it. ... PacBell couldn't manage to get a steady signal to us.

[superfly]

Dr mordrid,is there any real need to upgrade the firmware on the linksys(i have one too),from version 1.37 to the latest one?.