Mailinglist Archive: opensuse-security (359 mails)
| < Previous | Next > |
Re: [suse-security] Network structure and security
- From: Ray Leach <raymondl@xxxxxxxxxxxxxxxxxxxxxx>
- Date: 11 Jul 2003 13:22:15 +0200
- Message-id: <1057922534.1444.37.camel@xxxxxxxxxxxxxxxxx>
On Fri, 2003-07-11 at 13:01, Ken Schneider wrote:
> On Fri, 2003-07-11 at 05:09, Ray Leach wrote:
> > This is slightly off topic. It would probably be better suited to the
> > netfilter mailing list (http://www.netfilter.org/).
> >
> > Use one PC as router/firewall/proxy/gateway ... we do this for 4
> > networks on a single PC with 128MB RAM, a lot cheaper than a Cisco 1610
> > or above ...
> >
> > Ray
> >
>
> This is great if you have a small office on a tight budget. But how do
> you place a price on the security of your network and proprietary data?
> In the case of security I always buy the "best" product for the job and
> find it better to use seperate boxes for the router and firewall to help
> make it harder to break into the network.
>
> Ken
Yes, maybe I should qualify that.
We have one machine that performs as above, the we have a Cisco 2501
(kind of overkill) that gets hooked up to the ISDN line.
The router/firewall/proxy/dns/etc Linux all-in-wonder box is for the
internal network and zones.
--
--
Raymond Leach <raymondl@xxxxxxxxxxxxxxxxxxxxxx>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28
--
> On Fri, 2003-07-11 at 05:09, Ray Leach wrote:
> > This is slightly off topic. It would probably be better suited to the
> > netfilter mailing list (http://www.netfilter.org/).
> >
> > Use one PC as router/firewall/proxy/gateway ... we do this for 4
> > networks on a single PC with 128MB RAM, a lot cheaper than a Cisco 1610
> > or above ...
> >
> > Ray
> >
>
> This is great if you have a small office on a tight budget. But how do
> you place a price on the security of your network and proprietary data?
> In the case of security I always buy the "best" product for the job and
> find it better to use seperate boxes for the router and firewall to help
> make it harder to break into the network.
>
> Ken
Yes, maybe I should qualify that.
We have one machine that performs as above, the we have a Cisco 2501
(kind of overkill) that gets hooked up to the ISDN line.
The router/firewall/proxy/dns/etc Linux all-in-wonder box is for the
internal network and zones.
--
--
Raymond Leach <raymondl@xxxxxxxxxxxxxxxxxxxxxx>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28
--
| < Previous | Next > |