Re: Linux Firewall - Bob's Experiment

[Bob Washburne <rcwash () concentric net>]

Linux is usable, but my personal prefferance is

http://www.openbsd.org/

which is a battle hardened unix clone.

I am developing a system for my home as an experiment:
-) i486 running OpenBSD as a gateway/NAT to the Internet.  Everything
else other than NAT stripped off the system (can't hack what ain't
there).
-) P166 running OpenBSD as a bridge/firewall/IDS between the NAT and the
LAN (a bridge doesn't have an IP address.  Can't hack what you can't
see.)
-) LAN running whatever with non-routable IP addresses.

I am hopeing that this stratagy will go a long way in protecting my
firewall from compromise.  I have no illusions about what a firewal can
and cannot do, but at least this one layer will be well protected :-)

The next phase would be to configure the NAT is such a way that it can
be burned onto CD and the hard drive removed.  Very difficult to hack a
read-only system...


Bob Washburne

> i got a linux box i would like to turn into a firewall for home... i have
> it set up right now with 2 nics and just using simple maquerading. I would
> like to go to the next step in complexity... I was looking around
> sourceforge and freshmeat and saw a mind boggling number of programs.. I am
> new to firewalls, but experienced in Linux / AIX / HPUX. Any input would be
> appretiated and welcomed..
>
> Adam Graham
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://list.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards