Date: Thu, 01 Jul 1999 10:00:27 +1000 From: Andrew <mynet@uq.net.au> To: Mitch Vincent <cygone@zoomnet.net> Cc: freebsd-isp@freebsd.org Subject: Re: Using one FreeBSD box as router/firewall/vpn Message-ID: <377AAF9B.89017EBE@uq.net.au> References: <01b201bec30b$f2cf96e0$0200000a@windows.cygone.com>
next in thread | previous in thread | raw e-mail | index | archive | help
You use a ram disk for the parts that need to be witeable or you could have them mouted via NFS or SMBFS but kinda defeats the security aspect a bit. There is no decrease in speed except for when the system is loading. From there it all runs from ram ( which the machine would have plenty of ). You would not use this for a server but for a firewall where all you are doing is routing/filetrting/blocking packets then this is an interesting way to bring down cost and improve reliablity. If something happens and you are not in the office you simply inform the office staff to hit the reset switch. Andrew Mitch Vincent wrote: > > > >A novel idea though that I have seen done is burning > >the whole OS to a bootable CD-rom. > > > >The great thing is you have no danger of the HD crashing > >and even if someone finds a way in theres not a much they > >can do that a reboot wont fix ;) > How in the world would you do that? You would still have to have writable > filesystems for the OS to function properly. I suppose you could put system > binaries and such on the CD, but then you're talking about a horribly > decrease in speed. > > Ack, when you can just read up and secure your box, I don't think that > drastic of a measure is needed :-) > > - Mitch To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?377AAF9B.89017EBE>