Slashdot Mirror

← Back to Domains

Domain: gnatbox.com

Stories and comments across the archive that link to gnatbox.com.

Comments · 11

  1. Ripped from my bookmarks: other distros by Cally · · Score: 5, Informative · on Linux on a Floppy: Intro to Mini Linux Distros
    Some other fits-onna-floppy distros; many of these are security-focused, firewall-appliance type efforts. Disclaimer, this list is of stuff I /want; to check out when I get the time: I'vfe no idea how good or bad they are, beyond Theo's famous comment about entrusting the most important piece of one's network to the most unreliable piece of hardware in modern computers (approximately). Some of them may actually NOT be floppy-distros, I need to clean up these bookmarks... jesus where did the time go... *sigh*

  2. Re:LRP "sold out" ? by Speed+Racer · · Score: 1 · on Captain Crunch's New Boxes, Part II

    I wish someone would create a single floppy OpenBSD firewall.

    Is OpenBSD-based good enough? Try GNAT Box Light.

  3. Gnat box has a Free 5-user version by young-earth · · Score: 5, Informative · on Captain Crunch's New Boxes, Part II

    works great, easy to set up, floppy only, works on >= 486 machines. I've never seen it go below 98% idle on a 100MHz P5 with 5 hard-working machines filling a 768Kbps DSL line. You can pay $50 and get a DMZ added on to the free version, same price for a VPN license.

    Download it from here. This is a BSD based firewall, but no shell, nothing for a cracker to get onto it. Uses SSL web access (new in later versions) or a Winblows client for configuration.

    Oh and one point that is heavily stressed in their marketing material - it's ICSA certified.

    There is a small version for ~$750 street price that gives 25-user version with DMZ, no moving parts, runs off 12VDC.

  4. GNAT does great by Therin · · Score: 1 · on Choosing a Router/Firewall for the Home LAN
    Get an old PC with a 1.44 MB floppy and a couple of NICs, without a hard drive and without a CD.

    Put GNATbox light on it. It's free (as in beer). Register it and you get 5 internal IP addresses, 200 concurrent connections, stateful packet inspection, email gateway, etc. etc. Pay 50 bucks and you get a DMZ feature added.

    Oh, and it's ICSA certified - not something you're going to find in any other nice cheap answer.

  5. An existing product by X-Nc · · Score: 1 · on Firewall On A PCI card
    There is an existing firewall called GNAT Box that is built on a core of FreeBSD. They have one version called the GB-Flash which is a 16 meg chip that plugs into the IDE controller of any PC. It has everything that any big-name firewall product has and only costs $1,500 (keep in mind it's target compitition costs between $20k and $40k).

    I doubt the "average user" would find it worth buying but any small to enterprise sized business should definitely take a look at it and/or the GB-1000 Firewall Appliance. If you want to just test it out or see what it looks like there's a free, 5 node version called GNAT Box Lite you can get, too.

    ---

  6. An existing product by X-Nc · · Score: 1 · on Firewall On A PCI card
    There is an existing firewall called GNAT Box that is built on a core of FreeBSD. They have one version called the GB-Flash which is a 16 meg chip that plugs into the IDE controller of any PC. It has everything that any big-name firewall product has and only costs $1,500 (keep in mind it's target compitition costs between $20k and $40k).

    I doubt the "average user" would find it worth buying but any small to enterprise sized business should definitely take a look at it and/or the GB-1000 Firewall Appliance. If you want to just test it out or see what it looks like there's a free, 5 node version called GNAT Box Lite you can get, too.

    ---

  7. An existing product by X-Nc · · Score: 1 · on Firewall On A PCI card
    There is an existing firewall called GNAT Box that is built on a core of FreeBSD. They have one version called the GB-Flash which is a 16 meg chip that plugs into the IDE controller of any PC. It has everything that any big-name firewall product has and only costs $1,500 (keep in mind it's target compitition costs between $20k and $40k).

    I doubt the "average user" would find it worth buying but any small to enterprise sized business should definitely take a look at it and/or the GB-1000 Firewall Appliance. If you want to just test it out or see what it looks like there's a free, 5 node version called GNAT Box Lite you can get, too.

    ---

  8. An existing product by X-Nc · · Score: 1 · on Firewall On A PCI card
    There is an existing firewall called GNAT Box that is built on a core of FreeBSD. They have one version called the GB-Flash which is a 16 meg chip that plugs into the IDE controller of any PC. It has everything that any big-name firewall product has and only costs $1,500 (keep in mind it's target compitition costs between $20k and $40k).

    I doubt the "average user" would find it worth buying but any small to enterprise sized business should definitely take a look at it and/or the GB-1000 Firewall Appliance. If you want to just test it out or see what it looks like there's a free, 5 node version called GNAT Box Lite you can get, too.

    ---

  9. Re:@Home will prob ban static IPs. Thanks guys! No by mwburden · · Score: 2 · on @Home Responds to the UDP Notice
    Speaking (AFAIK) for all of the @HOME network: The ban on servers is ONLY on servers that are "visible" from outside your LAN. This would not prevent you (for example) from running a print server on your LAN (as long as it wasn't accessible from outside of your LAN). This makes sense, since their intention is to keep people from chewing up bandwidth (unless they pay extra money for the @WORK service), not to impose silly restrictions on people (although they sometimes manage to do that, too).

    Speaking only for the AT&T @HOME service: Although DHCP is used to make it easy to configure your network connection, the IP address itself is fixed. DHCP is not required, and Linux is one of the operating systems that is listed as supported.

    My own configuration is that my lan is hidden behind a firewall (a *MUST HAVE* for any LAN with a full time Internet connection!!) with NAT capability (GNAT Box. http://www.gnatbox.com if you're interested. The free version allows up to five hosts on the protected network to access the Internet simultaneously.) The side benefit to this is that I only needed a single IP address to give Internet access to all four machines on my LAN.

    I have my firewall configured to NOT use DHCP to configure the external address, which makes my network a little safer from "man in the middle" attacks. Not only is configuring the address statically expressly permitted, but it was actively encouraged by the tech who installed my cable modem.

    Also, I am using my own network card to communicate with the cable modem. Again, AT&T @HOME took this in stride without even blinking.

    Finally, I am using an unmodified Netscape 4.7 (downloaded directly from Netscape, not the version that AT&T @HOME gives you on their CD). I don't have any problem accessing either my account settings or the exclusive content that AT&T @HOME provides (FWIW).

    From what I've seen, since AT&T bought TCI, things have been getting better and better in our area. Of course, if your @HOME service isn't provided by AT&T then YMMV.

  10. Re:Very different experience by Anonymous Coward · · Score: 0 · on FreeBSD at COMDEX

    I should really learn to fully finish a thought before pushing submit.

    Anyway,

    If this isn't a lot that fits on one disk, I don't know what is; coming from gnatbox:

    freebsd kernel and bootloader
    standard utils
    IPFW with NAT
    pptp and VPN
    modem, ISDN and ethernet drivers
    SNMP
    command line and web browser interfaces
    this is with a kernel somewhat similar to a generic, and it handles about 30 different ethernet cards, many isdn adapters etc.

  11. One option by X-Nc · · Score: 1 · on Ask Slashdot: IP Masquerading Drawbacks?
    I know this is blasphemy but there's a fantastic commercial firewall system called GNAT Box that does all the NTA and statefull packet inspection you'de ever want and it works transperantly with all the fun stuff you mentioned. It's the only high-grade firewall system under $1000 and is completely self-contained (i.e. runs off of one floppy; no need for a HD or OS).

    Now, I know that this post might engender some "warm replies" about the touting of non-open source solutions but I am pregmatic about this. I prefer open source solutions but am not against a propriatary/commercial solution to get the job done. If it's a good product it's a good product.