RE: Firewall : WAS Re: was BabyCam now hacking

[Pedro de Oliveira <p.oliveira@xxxxxxx>]

On the subject of firewalls I have to put my 2p in:
After some attempts to manage Zonealarm and ZonealarmPro I gave up. The
thing was way too complicated to get working right (the way I wanted).  I
went to my local pc dealer who had some bits and bobs and picked up a 540Mb
HD for =A310 and an AT power supply for another =A310.  Work was throwing
a=
way a
P233MMX which I literally took out of the skip.  It had been rained on for
=
a
week so I swapped PSU and HD.  I then downloaded an ISO image of IPCop
(built on smoothwall but without the bad stuff).  Last night it took me
20minutes to get IPcop up and running with DHCP, DNS and of course the
firewall.  I can't put in words how easy it was to install and I am now
hav=
e
HTTP from one machine on my LAN, FTP and telnet from another.  A completely
faultless install.=20=20

After having done all of this, IPCop can be managed from any internal PC
through its web interface.

I am thoroughly impressed and can recommend it to anyone who can find a
spare PC to run it on.  My P233MMX is running on only 32Mb of ram and is
faultless.

IPcop even do you the service of burning you a CD and sending it to you for
free if you don't have a burner or can't afford to be online the time it
takes to download (without making and penny and actually being out of
pocke=
t
by providing this).

There is also an online forum if you have any questions about it.
www.ipcop.org

There you go - my recommendation=20

Pedro

-----Original Message-----
From: paul_watkin [mailto:paul_watkin@xxxxxxx]=20
Sent: 14 March 2002 11:21
To: ukha_d@xxxxxxx
Subject: [ukha_d] Firewall : WAS Re: was BabyCam now hacking

Some advice would be useful here, I curently have a basic setup of=20
1 Server running 98 until I get NT server installed
2 PC's (98se)
1 3Com Switch
1 3Ccom Office Connect ISDN Router

At the minute I have no software based firewall and as far as I am=20
aware the ISDN router doesn't have anything in hardware.

The server is on 24/7 but connection to the internet is on dial up=20
only.

I would like a recommendation as to what is the best way forward I=20
have looked at lots of solutions including Smoothwall/ doing=20
something myself in Linux (Suse 7.2) etc.

All of these rely on running an additional box 24/7 which I would=20
prefer to avoid.

Is there a solution using the existing hardware? or may be a=20
dedicated hardware route i should I pursue?

If the second box is the best solution what spec would I need?

Regards

Paul