Text 58565, 31 rader
Skriven 2009-11-27 21:20:16 av mark lewis (1:3634/12.0)
  Kommentar till text 58486 av Sean Dennis (1:18/200)
Ärende: Firewall/router solution
================================
 ml> yup... the very same way that smoothwall does it with their
 ml> RED/ORANGE/PURPLE/GREEN setup... not all are necessary and any
 ml> combination is available (but all must have RED since that's the
 ml> WAN/Internet) ;)

 SD> What pfSense does is first ask for the LAN cable to be plugged into
 SD> any Ethernet card (auto-sense).  It then configures itself silently
 SD> and asks for the WAN cable to be plugged in.  You wait a few
 SD> minutes while pfSense fires up and voila! instant firewall. 

yes, the determination of which NIC is used for what interface is automated
whereas smoothwall assumes you know what you are doing ;)

 SD> pfSense is configured to "deny all" by default so you just pop in
 SD> the ports you need open and go.

this is like smoothwall's closed security mode... it also has half-open and
open which are preferrable to some :)

 SD> I do have to say that I'm really pleased with pfSense.  I have the
 SD> firewall box on a USB-based KVM switch on my main computer so in
 SD> case of emergency, I can quickly get to it instead of going through
 SD> the web configuration.  pfSense has a simple text menu that allows
 SD> you to do several things, the least of which is "halt the system".

the text menu sounds like FreeNAS has... smoothwall _express_ (the free
version) doesn't have such but it would not be hard to add it as a mod ;)

)\/(ark

 * Origin:  (1:3634/12)