Re: Firewall old computer

From: Richard S. Huntrods (huntrods@nucleus.com)
Date: 05/11/02


From: "Richard S. Huntrods" <huntrods@nucleus.com>
Date: Sat, 11 May 2002 11:02:29 -0600


Amy and/or Russell wrote:

> I have to agree here, OpenBSD makes a kick-ass Firewall. It installs as the
> most secure OS I know of by default, and it is the only OS that can claim 4
> years without a remote hole! Let's see MS do that. :)
>
> I've installed a couple of these for businesses, nothing beats a Transparent
> Bridge Firewall. Provided you set it up properly, of course.
>
> "Berk S. Daemon" <someone@somewhere.com> wrote in message
> news:0BjA8.9821$GG6.699146@news3.calgary.shaw.ca...
> >
> > "Paul" <scrapper1000@yahoo.com> wrote in message
> > news:c1a0dede.0205021110.3c0331a6@posting.google.com...
> > > I have an old P166 with 64 megs RAM that I need advice about using as
> > > a firewall. I also have a home LAN running a W2K Server and Proxy 2.0
> > > with 4 other computers networked. They all use the proxy for internet.
> > > I want to try and multihome my old P166 and use it as a firewall for
> > > my LAN. A friend told me that he thinks the old thing will do pretty
> > > good with NT 4.0 Server running but if that is the OS of choice for
> > > the project, how will I implement a firewall solution on it. Looking
> > > for ideas. I have a copy of Norton Internet Security that I thought
> > > would work fine for this and I just picked up Blackice too to give it
> > > a try. Whenever I try and use Norton Internet Security on the W2K
> > > server it starts up with all kinds of problems and I'm through trying
> > > to tweak it so that it will run smothly on the W2K server. I'm
> > > thinking that with NT 4.0 I will have the power to use this comp as a
> > > router/firewall only while leaving the problems of the software
> > > firewall off of my w2k server. Any ideas? Do any of you think that
> > > that old comp could handle an installation of w2k server as a router?
> > > Also if any of you have some DETAILED information about packet
> > > filtering, could you please tell me how to find out all of the ports
> > > that I need to have open to allow inernet to my LAN. I also play an
> > > online combat flight sim that I am pretty sure will need ports open
> > > for but when I try and use Network Monitor it gives me ideas as to the
> > > ports but it is still a little to confusing to zero in on the exact
> > > ports. Also, does leaving these ports open create signifigant security
> > > threats?
> >
> > I highly don't recommend using windows as a firewall, that's like saying
> > windows is secure (an oxymoron).
> >
> > I'd recommend using something better, faster and much more secure such as
> > OpenBSD. Completely free, and can do all you want plus a lot more! And
> > you're system will still be overkill but it'll fly!
> >
> > If you need any URLs, info or anything, just lemme know.
> >
> >

Agreed as well. Try "http://www.bsdwall.org/" for a very good tutorial (and
script) for installing OpenBSD and then starting the firewall.

Cheers,

-R



Relevant Pages

  • Re: Subdomain security
    ... Here is a small list of the ports that I am talking about - ... I have to install a *secure* windows domain inside an insecure network. ... This means that my domain will be behind a firewall ofcourse. ... My domain would actually be a subdomain inside the insecure ...
    (Focus-Microsoft)
  • Re: Firewall old computer
    ... OpenBSD makes a kick-ass Firewall. ... >> server it starts up with all kinds of problems and I'm through trying ... could you please tell me how to find out all of the ports ... > windows is secure. ...
    (comp.security.firewalls)
  • Re: Ports to Block for security
    ... It's safest if you block all ports by default and only permit what you need. ... It's also most secure to block outbound connections as well as inbound. ... > can any body help me to set the firewall security...! ...
    (microsoft.public.security)
  • Re: Smart host or not?
    ... the only ports I'm opening up is the following ... also it would be very secure. ... > firewall, secure the FE server as best you can, etc. ... > effectively renders your DMZ not a DMZ anymore. ...
    (microsoft.public.exchange2000.general)
  • Re: Need advice about hacking and security
    ... All of my email accounts - Hotmail, Yahoo, ... > Outlook also requires a lot of tweaking to secure it. ... In some states, there are laws with teeth, ... > You probably need a firewall to start. ...
    (comp.security.misc)