Slashdot Mirror

← Back to Stories (view on slashdot.org)

Using OpenBSD to Secure Small Networks, Part 2

Posted by timothy on from the caulking-the-windows-with-plastique dept.

An Anonymous Coward writes: "ONLamp has another article on securing small networks, this time with the current version of OpenBSD and pf. Quite good."

42 comments

  1. State Table by Perdo · · Score: 2

    is broken... please try again.

    --

    If voting were effective, it would be illegal by now.

  2. Duh ... by NWT · · Score: 1

    Ok, the article is fine, informative and well shaped, needless to say that openbsd does it's work really well as a firewall.

    But why the hell do we have 80% troll posts? This sucks ... really.

    Oh yeah, mod me down now, but you know i'm right ...

    --
    Life sucks.
    1. Re:Duh ... by Anonymous Coward · · Score: 0

      Probably because noone gives a damn about an "operating system" from the 80's.

  3. Re:My experiences with Windows XP Professional by sirket · · Score: 2

    Why are you wasting Quad Xeon processors on an OpenBSD box? OpenBSD has always had poor dual processor support, and the performance boost drops even further when you go to 4 processors.

    Are you sure these boxes weren't running FreeBSD?

    -sirket

  4. Re:My experiences with Windows XP Professional by Anonymous Coward · · Score: 0
    OpenBSD doesn't even have SMP support.

    Pay attention.

  5. Re:My experiences with Windows XP Professional by Tuzanor · · Score: 3, Informative

    um, actually OpenBSD doesn't have ANY SMP support. So if you add more procs it'll only use one.

  6. Re:In case site goes down by Anonymous Coward · · Score: 0

    Heh, as if the seven Slashdot *BSD section readers are gonna take down a server.

    Then again, it _IS_ running *BSD...

  7. Next, How to Count all the Haxors being blocked by Anonymous Coward · · Score: 0

    I'll bet he gets to do another article (do you think there is money in writing for O'reilly web?) and will tell you how to look at those log files.

    I read where tcpdump has a vulnerability, does anyone know what that would mean to looking at your pf logs?

    Of course, we should expect to soon see the ipfilter vs pf flames shooting out from the screen, real soon now.....NOT!

  8. What does it ALL mean? by Anonymous Coward · · Score: 0

    I happen to have pf running on my cable modem, and it does great, thank you. But the number of blocked atacks that appear to be residual Code Red or Nimbda is astonishing. Is the Internet catching the equivalent of the common cold, that drains more productivity out of the economy than cancer or heart disease?

  9. OpenBSD as more then a firewall by Partisan01 · · Score: 1

    I am a OpenBSD fan, but I think that it doesn't get as much stage time for things other then a firewall. I use OpenBSD to run a webserver for my company, and an LDAP server. Granted I'm not running a high profile server, but it still gets the job done nicely, plus it's very secure. OpenBSD is a great firewall, but it also excells in many other aspects of serving...

    --
    ahh, the egg in the basket..
    1. Re:OpenBSD as more then a firewall by artymiak · · Score: 1

      Don't worry, there will be more OpenBSD coverage on ONLamp.com.

      --

      Jacek Artymiak
      freelance consultant and writer
      master of many a page

    2. Re:OpenBSD as more then a firewall by Anonymous Coward · · Score: 0

      Indeed. And past benchmarking (I don't have a url to hand, it was a while back) has shown that it out performed Sol servering http content with apache.

  10. Re:My experiences with Windows XP Professional by Anonymous Coward · · Score: 0

    It doesn't have ANY; LOL!

    Follow the SMP branch and you're see it does have SOME, and not 'not ANY'.

  11. Re:My experiences with Windows XP Professional by Anonymous Coward · · Score: 0

    The main release of OpenBSD has zero SMP until you put the unstable SMP patches on it. Most of the current code just detects CPUs and sets up the framework. They have a LONG way to go but are moving forward. There are't any real performance improvements yet. Give it some time though.

  12. Re:My experiences with Windows XP Professional by Anonymous Coward · · Score: 0

    OpenBSD is the best firewall !
    I/O performance is too slow for other tasks compared to its competition.

  13. Try emBSD by KenFury · · Score: 1

    Take a look at emBSD at 32 meg it's small and secure (OS is on flash memory). Most inportantly it does one job, routing and firewall duties, and it does it well. http://embsd.suspicious.org/