*BSD News Article 41855


Return to BSD News archive

Newsgroups: comp.os.386bsd.misc
Path: sserve!newshost.anu.edu.au!harbinger.cc.monash.edu.au!msunews!caen!hookup!swrinde!pipex!uunet!world!brownj
From: brownj@world.std.com (James F Brown)
Subject: Re: FreeBSD as a firewall?
Message-ID: <D391AE.7u7@world.std.com>
Organization: The World Public Access UNIX, Brookline, MA
References: <jlemonD387IF.7sz@netcom.com>
Date: Tue, 31 Jan 1995 02:51:50 GMT
Lines: 26

jlemon@netcom.com (Jonathan Lemon) writes:

>I'm in the process of setting up a machine that will act as a firewall
>for a client's internet connection.  I have 2 questions:

>	- will a 486 EISA machine with 8M be sufficient to handle the
>	  task of a firewall for a 56k link? (no IP forwarding, internal
>          to external connections handled by SOCKS, etc)

>	- is there some sort of card + driver for the PC that will handle 
>	  the input from a 56k frame relay link?  Or is something equivalent
>	  to a cisco 2501 required to convert the frame relay input to
>	  ethernet packets which are then fed to the PC?  

>I really don't want to have to buy a router just to handle the frame relay
>stuff, since all real routing will be done internally, behind the firewall.
>--
>Jonathan					jlemon@netcom.com

The firewall would be a lot stronger if you put filtering routers behind 
and infront of your FreeBSD box. YOu could even use FreeBSD boxes running 
screend as the routers...

If you haven't read Cheswick dna Bellovin's book, I'd pick it up.

- Jim