[ILUG] Firewall Overhead.

[Liam Bedford]

On Tue, Jun 27, 2000 at 04:44:26PM +0100, Dermot Hanley came forth with:
> Hi,
> 
> The debate regarding firewalls on Linux sprung out of a request for as to
> whether they should have a firewall if they are on-line most of the day with a
> cable modem. I believe they should, and given the *current* capabilities of
> various OSes they shouldn't choose Linux 2.2.x (the latest stable kernel) if
> they wish to be certain of performing this operation efficently or reliably.
> 
> Personally I'd recommend using an OpenBSD 2.7 system with ipfilter (because
> it's a stable kernal release with support for the excellent bpf). Run this on
> an old Pentium machine, and run a proxy such as squid on you home PC purely to
> speed things along and put in some rules to prevent the kiddies from seeing
> Plop in one of his hardcore donkey porn roles.
Agreed, assuming the IDE support is better than in 2.6. I found my
machine was about 10 times slower in Open rather than Free. FreeBSD is nearly
as secure, and can be made to be if you want. It also does _not_ crash :)
(for the pissing contest, mine was at 70+ when the ESB turned it off :(,
and the one in work is at 283 days... (the linux server had kernel
upgrades, so it loses :())

L.
-- 
Liam Bedford                  | Four thousand holes in Blackburn, Lancashire
System Administrator          | And though the holes were rather small
WBT Systems, Block 2,         | They had to count them all
Harcourt Centre, Harcourt St. | Now they know how many holes it takes to fill
01-4170100                    | The Albert Hall