[rescue] Happy New Year! RIP, Sun/Solaris...

[Patrick Finnegan]

> > I run OpenBSD on my firewall box, which is a single-core
> > Intel-based box with a QFE, running off a smallish CF card.  It's
> > fast on the old hardware, has a tiny footprint, and is good at its
> > job.  It'd pretty much suck as a user desktop ... but I'm not
> > making any attempt to try to use it as one, so that's fine.
On Sunday, January 02, 2011, Steve Sandau wrote:
> More or less the same here. My firewall and http server are OBSD and
> work quite well on older hardware. OBSD is really simple to set up
> and easy to set up securely. The OBSD SS5 I had before the current
> 900MHz Intel box finally didn't handle the bandwidth, so I
> "upgraded."

For a counterpoint, I generally use (and prefer) Linux w/iptables for 
NAT "firewall" functionality.

I used to do that at home, but currently I'm running NAT on my Cat 6509 
w/Sup2 & MSCF-2/PFC-2, which has some GRE tunnels with routing magic to 
help me talk to stuff at work, and WCCP to talk to squid on a Linux box.

For the stuff I have at home that sits on a public address, I use 
iptables on the box itself, and 802.1Q tagged vlans to separate 
networks.

Pat
-- 
Purdue University Research Computing ---  http://www.rcac.purdue.edu/
The Computer Refuge                  ---  http://computer-refuge.org