simple firewall

[arsprod]

I'm looking for a simple, hardware-based firewall that allows NAT by IP address not port. Most of the cheaper firewalls only redirect by port. Anyone have any ideas?

 

[danielhozac]

So you want to redirect all incoming traffic to one box? Then you could setup a DMZ. //Daniel

 

[SgtB]

http://www.astaro.com

(FREE)
I'm using it. Its a linux based firewall, that you install on a computer you don't need. It runs a hardened linux kernel, and essentiall turns a spare machine into a hardware firewall.

http://leaf.sourceforge.net

(FREE)
Another Linux based firewall, that turns a formerly useless computer into a hardware firewall. The system specs on here are far less than for astaro, but you're missing out on features.

If you're looking for a "professinal" hardware device then I'd go with Cisco's PIX 501 series. It'll cost you around 300-400.

Or one of these:

http://www.watchguard.com/products/firebox.asp

Personally, I'd go with PIX over watchguard. ________________________________________
Check out

http://www.security-forums.com

 

[arsprod]

The PIX 501 was what I was going to do but Cisco is always such a pain to configure!

 

[SgtB]

PIX a pain??? There's got to be tons of tutorials out there. I think there's even a gui type interface (web-based maybe?)
Either way you should learn. Its good experience. ________________________________________
Check out

http://www.security-forums.com

 

[fastlanwan]

"PIX is a pain is you want it configured correctly."

Having a gui interface doesn't make anything simpler if you don't understand ip , filters, rules, ports and other protocals like ICMP etc... A+ N+ Sec+ SME/Sec+