Slashdot Mirror

Maybe my brain fell out of calibration this morning, but I can't find what you're talking about there under 'products' or 'projects'. As far as inexpensive routers go, if someone can use one that isn't wireless, I really like my Linksys . It works great as a router/firewall and lets me connect all of my home computers to the internet via a single cable modem.

here's a $200 firewall box. dunno if it GNU/Runs GNU/Linux or GNU/Not.

I just checked the Linksys BEFSR81 and it is in the same boat, 10Mbps on the WAN side. And I don't really call those NAT devices "firewalls". I think "firewall" gets overused like "3-D accelerator". So if you are talking a 100Mbps connection, why not get a real firewall? Or at least add a little protection with a DMZ port on the firewall.

On the cheap, you could build a headless Linux or OpenBSD box with three (3) 100Mbps NICs for under $500. I've had great success with Linux IPChains for all kinds of configurations (e.g., setting up a "test" server internally and properly routing it for internal systems so it appeared on a public IP), etc... I'm starting to get into OpenBSD (the various BIND 8 hacks make me think that Theo knows what he is talking about when it comes to OpenBSD sticking with BIND 4 ;-).

Otherwise, the SonicWall PRO is an excellent box that can be found for under $2,500. It features 100Mbps for WAN, DMZ and LAN. Excellent boxes for the price, good feature set (although the logging good be improved a bit, but everything else is great). Personally used these solutions as well (and identified a few trojans that people had accidently downloaded and installed on their PC with IE/Outlook). I even had an external server on it's DMZ port get hacked (c/o a known BIND 8 exploit that I failed to patch), but the internal systems on the LAN port were left untouched.

BTW, I just came up a good analogy yesterday on a LUG list regarding firewalls:

• Open Door = Nothing
  So "passer-bys" can see in.
• Closed Door = Private Network Router
  So "passer-bys" can't see in, but they can still get in. And you can easily get out.
• Closed Door w/doornob lock = Basic firewalls, non-ICSA certified "black box"
  A bit of difficulty to get in. You can still easily get out.
• Closed Door w/doornob & deadbolt lock = SonicWall, ICSA-certified "black boxes"
  Much more difficult to get in. Blocks some things from getting out (and you can add limitations too).
• Closed Door w/doornob & dual-keyed deadbolt lock = Linux, OpenBSD and complete custom firewalls
  Hard to get in when properly configured. Doesn't allow poorly designed protocols to get out by default.
  Problem: Like a dual-keyed deadbolt lock, sometimes you leave it unlocked because it is a pain to deal with (or leave the key in the inside lock).

-- Bryan "TheBS" Smith

Another thing, unrelated to service...

DO NOT, repeat, DO NOT get a USB modem. If you can avoid it, don't get an Alcatel modem. They are known to have problems with sync.

If your provider insists that you use PPPoE, try to get a router. Netgear RT-314 and RT-311 as well as the Linksys BEFSR41 or BEFSR11 seem to be pretty popular.

If you use PPPoE, and you don't want a hardware solution, try RASPPPoE instead of Enternet.

The advantage to the Linksys BEFSR41 and the NetGear RT-314 is that they are 4-port switches plus the DSL/CableModem router.

Another thing, unrelated to service...

DO NOT, repeat, DO NOT get a USB modem. If you can avoid it, don't get an Alcatel modem. They are known to have problems with sync.

If your provider insists that you use PPPoE, try to get a router. Netgear RT-314 and RT-311 as well as the Linksys BEFSR41 or BEFSR11 seem to be pretty popular.

If you use PPPoE, and you don't want a hardware solution, try RASPPPoE instead of Enternet.

The advantage to the Linksys BEFSR41 and the NetGear RT-314 is that they are 4-port switches plus the DSL/CableModem router.

Actually, the Linksys router does provide 100MBps Ethernet. There's a four port autosensing switch on that bad boy. http://www.linksys.com/scr ipts/features.asp?part=BEFSR41

If you can't (or don't feel like) building one yourself, go nuts and get one. Tim Higgins has some wonderful reviews and resources. I myself have a Linksys 4 port 10/100 router. The ONLY thing that sucks about it is that @home's DHCP server bites, so having the thing update itself sometimes takes a while. But it's worth it. (I'm using rogers@home in Toronto area)

Quite frankly, I'd ignore this part of the policy. The first thing I'd do after signing up with this service is install an inexpensive router (Linksys makes one that looks good) and set its firewall functions to exclude all connections originated from the outside. This is for your own protection (my router detects several 'port scans' a day - people looking for a vulnerable machine), but it also permits you to hook up any number of computers to their service indetectably. The router looks like the computer to them, and it will act as the proxy for all of the machines you hook up to it. If they give you any attitude about using a router (short of coming out and looking, they shouldn't be able to tell it's there), tell them you're protecting yourself with a hardware firewall and that if forced to directly connect your computer, you'll hold them responsible for the consequences of any outside attack on it.

or you could buy a Linksys Etherfast Cable/DSL Router... works great for me for my windows and my FreeBSD boxes simultaneously

I've been looking at getting either the NetgearRT311 or the LinksysBEFSR41.
They don't run linux, but they're small, cheap, have some filtering, and can quietly run 24/7. Anybody have experience with these? Are there other boxes that qualify? For between $120 and $160 they seem like a good deal.

I don't understand. You can get Linksys' EtherFast Cable/DSL Router for roughly $150 on the net. Vastly superior solution. More flexible and includes a firewall. I'm not suggesting *we* use it -- I'm quite happy with my dual-nic Linux router firewall. But the masses might appreciate what it can offer.

Not to downplay your Linux router, but I think a better solution to the scenario you described is the Linksys EtherFast Cable / DSL Router. You should look into it.

It generally works with any Cable modem or DSL service that connects to a PC via Ethernet. LinkSys also makes one of these, and you can find information here. It includes a 4 port switch, NAT, firewall, etc.

I do installations for a local Cable Modem company here, and we've been playing with the LinkSys model for the past few days. They run around $200US and work pretty well.

Basically, it has one 10BaseT port to connect to the Internet Service (Cable Modem or DSL) and 4 ports to connect to the computers on the Local network. Setup is almost nil, and performance is impressive.

I have a feeling we'll see more companies making these very soon.

Linksys Linux support page
Go here for tulip.o info.

Linksys is already doing one, and it looks pretty sweet. It's called the "EtherFast Cable/DSL Router", and acts as a router, hub and switch with firewalling, NAT and IP masq abilities.

It's right on their front page at www.linksys.com.