[svlug] Firewalls?

[David Rosenstrauch]

Skip Evans wrote:
> So, to recap:
> 
> 1) Any recommended reading sources would be 
> greatly appreciated;
> 
> 2) Recommendations for a specific installation 
> would be great, and finally;
> 
> 3) Do you think those live CDs are worth a look? I 
> do have a spare box I can commit to the efforts.
> 
> Thanks globules!
> 
> Skip

Personally, I'd just buy a cheapo Linksys/Belkin/SMC/etc. firewall box 
and use that.  They're usually good enough for SOHO uses and, 
particularly because SOHO networks usually need a cable/dsl router, it's 
cheap and easy to kill 2 birds with one stone and buy a combo 
router/firewall box.


That said, though, if you want to use a dedicated machine like you 
mentioned, take a look at:

m0n0wall (http://m0n0.ch/wall/)
SmoothWall (http://www.smoothwall.org/)

and some of the live cd's listed on:

http://www.livecdlist.com/?pick=All&sort=&showonly=firewall

In addition, if you don't want to go the LiveCD route, and want to use a 
full-blown distro (i.e., perhaps you want to run other daemons on the 
box) take a look at firestarter (http://www.fs-security.com/).  It makes 
setting up a firewall totally point and click.

HTH,

DR