similar to: Build a Firewall (Can I learn to do this...)

Hi All, I want to build a dedicated firewall/router as I am launching a NPO and I can host this in my garage. (Comcast offered me a 100 x 20 circuit for $99/mo with 5 statics) I used to run Untangle, but as of version 9, you are forced to use their build in protocol policies versus the firewalling I am used to (Deny All and then opening holes for specific IP's, etc). There are so many

Hi, My customer has a outdated firewall that is also presenting a NAT nightmare for getting the Asterisk server reachable from the internet. What firewalls work good with VOIP? I really want to steer away from any ALG supported firewall. I just want a good firewall that works well with Asterisk. Thanks, David Wathen -------------- next part -------------- An HTML attachment was scrubbed...

Well FWbuilder is NOT easy. The documentation does not match the current GUI. Now the box is locked up. I will have to pull it again, hook it up to a kybd/VGA and reset iptables.... Maybe Shoreline with webmin.... Problem is I want a REAL router/firewall with little work. Both public and private nets have routable addresses. No NATing for me! I just help write the RFC ;) And all the

Hello in one of the emails I sent earlier ; mark (m.roth at 5-cent.us) mentioned: > install linux on a computer with two ethernet cards. connect eth0 to > your internet connection, and eth1 to your local network. configure > iptables firewall rules in the linux system. or install pfsense on that > same computer. Please if any one can help with more details and

Hi All, So my electricity bill is through the roof and I need to pair down some equipment. I have a CentOS 6.5 Server (a few TB, 32gb RAM) running some simple web stuff and Zimbra. I have 5 static IP's from Comcast. I am considering giving this server a public IP and plugging it directly into my cable modem. This box can handle everything with room for me to do more. Doing this would allow

I need a decent, easy, firewall on Centos. This is for test systems, so I do not need a lot. For 'a lot', I use and Astaro firewall. I had used Firestarter once, but found out that it cannot handle routing between a public and private network. Basically saying this is impossible. Of course, if your private network is addressed per RFC 1918 (that I co-authored), I can understand

Hi List, I am looking for 1U firewall hardware, any ideas? Something like that (http://www.applianceshop.eu/index.php/firewalls/opnsense/opnsense-pfsense-ghz-19-appliance-1.html) but at least with 5GBit nics and more memory. -- Eero

Hi All, So before when I used PIX's for my employer, our traffic was statically routed to one IP and then the firewall decided if allowed/ denied and passed it on or dropped it. I have a Comcast business circuit with 13 IP's. The gateway device they provide is a 'pass through' device. They sent traffic for all 13 IP's my way. It just allows traffic through. So if I put

Hi, I just wonder if I can replace PIX firewall with machine having IPTable as my firewall. I want to control our firewall but due to the lack of knowledge in configuring PIX, i want to replace it with Linux or BSD. I do not have the time now to learn the complexity of PIX and yet I want to know what happening in my firewall and control it as much as possible. Do you think it is justifiable for

Hi All, Sorry, I am still confused about implementing a firewall without having my ISP static route all of my traffic to my public IP's to a single public IP. So before when I have done this for work all traffic has been statically routed. Now I have a comcast modem and it is 'pass through' so traffic for all my 13 IP's is allowed and I have to decide what to do. So I

Hi, I have about 10 Cisco 7960s behind a PIX 506E (IOS v6.3) firewall. After some period of time, asterisk says that some of them are unreachable, and the phones lose their registration. The only way to make the phones recover is to clear the NAT translation tables for the phones on the PIX (clear xlate...) Does anyone know how to fix this? As you can imagine, it is quite annoying. And it does not

Hello, I am not too familiar with the settings in our PIX (learning though). Here is the only access-list setting that we have in place for Asterisk: access-list acl-prod permit udp any host EXTERNAL_*_IP_HERE eq 5060 In rtp.conf we are allowing ports 10000 - 20000. We are not using SIP Fixup in our PIX due to firmware version. How do I go about adding the ability for udp ports 10000 - 20000

hey friends, I am looking for a free open source software (web based or application) through which I can monitor the Pix Firewall. What it should show Interface status or traffic , VPN Connectivity status, CPU Status, Memory Status etc. I am also running DHCP server on Pix Firewall (due to some reasons) If it can monitor that also means showing how many IPAddresses has been assigned, to whom,

Hey, The company I work for is in the market for a new firewall. Right now we're hosting all of our own stuff (on CentOS servers) behind an old checkpoint firewall. I think Checkpoint is overkill for our needs and very expensive, plus I don't like the "per-user" charges of some commercial solutions. What do you guys suggest that we upgrade to? Here are some of the

Is there anything special that anyone here has had to do to get an Aastra phone (on the Internet) to talk to Asterisk behind a PIX firewall? Ports 10000-20000 UDP are open on the PIX and forwarding to the Asterisk server. The Asterisk server's RTP.CONF is set to use 10000-20000. The phone registers, and will place AND receive calls, however, no audio is passed. The phone is an Aastra

We have kernel support for IPv6 in Centos, but not stateful firewall support. That requires at least the 2.6.20 kernel, which means Fedora Core 6 or some other Linux distro. None of the various free Linux firewalls have IPv6 support. Supposedly FWBuilder can manage Netfilters for a Linux Kernel, but that seems to be the extent of it. More sad facts as I uncover them.....

Hello all, first of all i'd like to wish you all happy holidays, and a merry belated christmas. Secondly, i'm trying to setup? a centos 5.4 to act as: 1. firewall # can you check my config below and tell me if i missed anything? 2. DHCP # already configured 3. transparent squid proxy #? already configured 4. http (virtual hosts) # in the near future 5. squirrelmail # in the near future

Hi all, I want to set up a firewall on CentOS 4.4. I wnat to know the diiffrence between port filtering and packet filtering ? Can iptables do both? Is there another pkg better than this? if so, pls let me know. The purpose of this is to setup a firewall for production use. -- Thank you Indunil Jayasooriya -------------- next part -------------- An HTML attachment was scrubbed... URL:

I was using pfSense in a vm under esx but I want to move to Xen and prefer something that can run as a pv guest. Anyone got any reco's of what can run on top of CentOS to perform a similar role as pfSense (perform nat/pat and firewall etc between two interfaces)? Thanks for any ideas! jlc

So, the more I look at various ways to lay out my infrastructure, the more I am thinking about specs for hardware. Starting with firewalling. How does one determine the specs for a firewall? What I mean is: 1. motherboard/CPU - p4? Dual-Core? Intel i3, i5, i7? 2. RAM? 4gb? 8gb? More? 32gb? 3. Obviously GB Nics! I am bring about 300gb of traffic a month right now and I expect that to