[TriLUG] m0n0wall -- was OT: tracking software.

[gregbrown at mindspring.com]

Yes, a "mega" firewall would certainly be much less expensive and, 
sadly, Soekris boxes are not inexpensive.  However, there are some 
other benefits to this approach such as saving a bit of power.  Yes, 
I know it will take quite a while to make up the extra cost in power 
saved but it has made a huge difference with my UPS as I now only 
have one large, power sucking PC on my UPS rather than two.

That it's just plain cool.  :)


Greg


--------------------------------------------------------------------------------

On Oct 29, 2004, at 11:22 AM, Shane O'Donnell wrote:

Isn't the "mega" firewall cheaper (if only slightly)?  

Soekris ain't cheap for their little boxes...plus you have to buy the CF.

Shane O. 

-----Original Message-----
From: trilug-bounces at trilug.org [mailto:trilug-bounces at trilug.org] On Behalf
Of gregbrown at mindspring.com
Sent: Thursday, October 28, 2004 10:36 PM
To: Triangle Linux Users Group discussion list
Subject: Re: [TriLUG] m0n0wall -- was OT: tracking software.

I am using Soekris Net-4501 boxes running off CF and they work 
GREAT.  I used to go with the "mega" firewall design where I had 
a dedicated full-sized computer running some flavor of Linux or 
BSD but once I went down the "embedded" route I haven't looked 
back.  

Granted, with CDROM and Floppy I could do some more stuff - like 
combining m0n0 with Snort for IDS but the small form factor trumps 
the IDS features for my clients thus far.

If you have any m0n0 questions feel free to throw them my way!  I 
really like this firewall design.

Greg

-----Original Message-----
From: john broome <john at jbroome.dyndns.org>
Sent: Oct 28, 2004 11:28 PM
To: Triangle Linux Users Group discussion list <trilug at trilug.org>
Subject: [TriLUG] m0n0wall -- was OT: tracking software.

gregbrown at mindspring.com wrote:
I have a small client who is looking to track how much time her users
spend on-line and playing games.  I have a basic network set up for
them now consisting of a Sprint DSL line, a M0n0wall firewall, and a
small switch.  I will be putting a linux box on her network to act as
a syslog server so I imagine I could get the syslog message from m0n0
to track URL requests, etc but I'm still stuck without knowing what
people are doing on thier local machines (playing games etc).

Greg, I've seen you mention m0n0wall a few times on the list lately.. In 
your installations @ client sites, are you doing the tiny boxes running 
off CF, or are you using m0n0 from a cd-r and floppy?

-- 
TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
TriLUG Organizational FAQ  : http://trilug.org/faq/
TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc



-- 
TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
TriLUG Organizational FAQ  : http://trilug.org/faq/
TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc

-- 
TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
TriLUG Organizational FAQ  : http://trilug.org/faq/
TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc