[geeks] Firewalls...

[Clay Mellender]

You dont always need 5 or 6 nics either. Multiple IP addresses per card
work just fine, if your network layout will permit logical seperations
as opposed to physical. Heirarchical firewall/routers often solve
multiple subnet situations as well.
If you need to support a large number of physical/logical networks or
subnets you will be better off with a cisco pix or comparable hardware
based firewall. The prices arent that bad, the failover features work
well, and in my opinion (As well as a great number of other people's)
Pix  boxen are the creme de la creme of hardware based firewalls.
As usual, YMMV.

Clay



Chris Byrne wrote:
> 
> David,
> 
> As long as you don't put more than 5 pci cards in you are generally OK. Some
> motherboards can handle six reliably, some cant. Of course it depends on
> your MoBo and the overall composition of your hardware and software.
> 
> That's the thing about PC hardware that makes it so difficult to properly
> support. There are so many variables, different configuations of hardware
> and software etc... that knowing all of the possible issues is essentially
> impossible.
> 
> And then of course we also get back inot the PCI bus bandwidth inadequacies
> issue.
> 
> Chris Byrne
> 
> -----Original Message-----
> From: geeks-admin at sunhelp.org [mailto:geeks-admin at sunhelp.org]On Behalf
> Of David Cantrell
> Sent: Thursday, March 22, 2001 17:02
> To: geeks at sunhelp.org
> Subject: Re: [geeks] Firewalls...
> 
> On Thu, Mar 22, 2001 at 12:49:56PM -0600, Clay Mellender wrote:
> 
> > Actually, the IP Chains and IP masquerading built into linux is very
> > robust. I have been using it for years, and it performs very well, even
> > on a 486 with 20 Mb of ram. Ping times are very good, and with some of
> > the package enhancements there are some very powerfull features.
> 
> I'm not denying that - in fact, I do the same.  But I am wary about trying
> to run too many interfaces on Linux, simply because PC hardware is a bit
> crap.
> 
> --
> David Cantrell | root at alphacomplex.org | http://www.cantrell.org.uk/david/
> 
>     This is a signature.  There are many like it but this one is mine.
> 
> ** I read encrypted mail first, so encrypt if your message is important **
> _______________________________________________
> GEEKS:  http://www.sunhelp.org/mailman/listinfo/geeks
> 
> _______________________________________________
> GEEKS:  http://www.sunhelp.org/mailman/listinfo/geeks