Hardware Firewall

[djpic]

I am running a web server, DNS server, and mail server. I will be getting about 4 more static IP addresses and need a good hardware firewall with at little cost as possible. Any ideas?

 

[CiscoGuy33]

djpic,

As my hardware firewall I have an old Dell P3 600 with 512 RAM and 4 nics running Linux IP Cop (FREE -

http://www.ipcom.org)you

can do same with Smoothwall or mOnOwall.

The IP Cop is a stateful firewall with IDS and divides my network into a DMZ and 2 secure LANs (one for my computers and 1 for wireless). Lots of features you would see on a PIX or more expensive firewall. Lots of monitoring also

Only cost is older computer and electricity but once installed you do not need monitor, CD, mouse, keyboard etc - just computer, harddrive and nics.

You monitor through web gui!

Very easy to use and I am NOT a Linux guru!!!

I have even seen IPCop firewall listed on network diagrams for smaller Enterpise networks in Network Magazine.

Hope this helps!


E.A. Broda
CCNA, CCDA, CCAI, Network +

 

[djpic]

I didn't see the software on that link.

 

[smah]

Try this

http://ipcop.org/

for IPCop

Monowall

http://www.m0n0.ch/wall/

Smoothwall

http://www.smoothwall.org/

 

[CiscoGuy33]

djpic,
Sorry -

http://www.ipcop.org

Hope this helps

E.A. Broda
CCNA, CCDA, CCAI, Network +

 

[djpic]

Do I need to install Linux on the machine? I barely have any linux experience at all. I did install it once on my laptop but then took it off when I couldn't get the drivers to work.

 

[smah]

Monowall will run off a bootable CD. It would be an easy place to start.

 

[djpic]

What chipset of NIC do I need?

 

[djpic]

I see there are small boxes that you purchase with Monowall. Have you tried those at any time?

 

[smah]

I've never tried those, but it will run fine on a machine like Ciscoguy33 mentioned. This will at least get you started to see if it's something that you want to use, if you don't like it, just thow the cd away.

 

[CiscoGuy33]

djpic,

For IP Cop you just download and make a CD and then run it on the dedicated machine - I AM NOT a LINUX GURU - it is all gui on the web interface so no UNIX or LINUX skills needed.

I added one of the unsupported add ons - Cop Filter and had to do a little UNIX to install that but they had GREAT directions at the site. Once again this is one of the extra add ons that are not really needed for the firewall and IDS of IP Cop.

As for nics I use 3com, Linksys and it detected the on board nic on the Dell machine I am using.

Makes a nice firewall and IDS that will allow you to do lots of stuff that you would expect on a PIX costing $$$$$$

Go to the website and read through the docs and I think you will see how easy and well documented it is.

I have been using it for several years now!

Just my thoughts!



E.A. Broda
CCNA, CCDA, CCAI, Network +