Author Topic: Hardware Firewall for a Server (Read 642 times)

LePaul · « **on:** January 07, 2002, 02:31:00 PM »

I have a nice Linksys DSL/Cable router with firewall protection built in. As a second layer of security, I have Norton Firewall running on my PC.

My web hosting company was using BlackIce on its NT Server and I'd sure like to run something like that Linksys box on it, but it only supports 1 IP address. I'd like to defend the whole network of 16 IPs and do away with relying on the software.

Any suggestions ? Hardware + Firewall usually equals big bucks. I had a friend who said he could build one via Linux, but that hasn't happened since he's too busy with other issues. I have no interest in learning Linux, but if a hardware device is out there, that some can recommend, please share. I already know the ports I need to close and what stays open (21,25,80, etc)

Thanks

Sancho · « **Reply #1 on:** January 07, 2002, 08:22:00 PM »

So a pix is out of the question I take it?

I'd go with an old PC with two NICs running OpenBSD. If you don't have a PC available, Soekris has a neat little embedded PC for firewall type applications. You can get it with emBSD installed for around $300 (guestimate). I haven't used one of those boxes, but I have set up pf, OpenBSDs packet filter program and it isn't difficult.

There's also a Linux-based firewall called Smooth Wall. It is manageable from a web browser, so no command line stuff to fuss with. They've got a free version (20 meg CD iso image--just boot the CD to run the firewall) and some inexpensive non-free versions available.

LePaul · « **Reply #2 on:** January 07, 2002, 11:28:00 PM »

I have the ISO for that smooth wall...how do I burn it right? I have Adaptec Easy Creator.

LePaul · « **Reply #3 on:** January 08, 2002, 12:16:00 AM »

Nevermind

opened it up as a Layout and away she went

Printing the docs. I'm the kind that likes to read the docs, yellow high-lighter in hand, and then plug it in and go!

Thanks! Great lead

LePaul · « **Reply #4 on:** January 08, 2002, 09:29:00 AM »

Follow Up

The real product to get is this:
http://www.smoothwall.co.uk/products/corporateserver/

Its smoothwall, but the corp version, which has an addon for hosting. About $300ish all said and done. Not bad, looking to go that route.