Re: [gentoo-user] [OT router advice] a router capable of detailed logs

2011-04-19 Thread Mick
On Tuesday 19 April 2011 04:31:38 Harry Putnam wrote:

 So, cutting to the chase; can anyone recommend from actual use, a home
 lan router that has gigabit lan ports and very configurable/
 informative logging options?

Have you gone through the documentation to see if there isn't a more verbose 
option for the logs?

Do you get the same condensed format when you capture the logs in your LAN 
syslog server?
-- 
Regards,
Mick


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] [OT router advice] a router capable of detailed logs

2011-04-19 Thread Joost Roeleveld
On Monday 18 April 2011 22:31:38 Harry Putnam wrote:
snipped - Not familiar with CISCO specifics

 So, cutting to the chase; can anyone recommend from actual use, a home
 lan router that has gigabit lan ports and very configurable/
 informative logging options?

Not familiar with specific types, but I've had best results with the routers 
from Zyxel. The one I used to use (ADSL) would provide a lot of information 
via SNMP and other logging-options.
Also, this one had no problem with multiple (1000+) simultaneous connections. 
Which is something other brands suffer from regularly.

 ps - I'm not interested in running an old linux or openbsd, machine as
 router.  Having a silent cool router the size and weight of a medium
 book is too appealing.

I understand the sentiment. I've since stopped using pre-made routers as I had 
the machine running anyway as a home-server and moving the router/firewall/... 
onto the server wasn't too much of a change and did mean I could switch off a 
small device.

--
Joost



Re: [gentoo-user] [OT router advice] a router capable of detailed logs

2011-04-19 Thread Peter Humphrey
On Tuesday 19 April 2011 04:31:38 Harry Putnam wrote:

 I'm not interested in running an old linux or openbsd, machine as router. 
 Having a silent cool router the size and weight of a medium book is too
 appealing.

I'm gazing at an Atom box sitting on my window-sill that would be ideal. It's 
silent and it has gigabit LAN connections. It's 8 square by 1 3/8. Have a 
look 
at www.aleutia.com.

-- 
Rgds
Peter



Re: [gentoo-user] [OT router advice] a router capable of detailed logs

2011-04-19 Thread Pandu Poluan
On Tue, Apr 19, 2011 at 10:31, Harry Putnam rea...@newsguy.com wrote:
 This is way OT, but this list is such a great resource I suspect the
 advice gotten here will be more to the point. ( I have posted to a
 network hardware group as well)

 I've bumped my home lan router to a gigabit from the old 10/100
 (NETGEAR FVS318).

 I made the move for the gigabit lan ports mainly.  That is, I was
 happy with other aspects of the old router.  I ended up with a cisco
 RVS4000 v2.

 The cisco solved the gigabit problem with 4 lan ports and even a
 gigabit on the Internet port... (which is probably not really doing
 any thing on a cable connection).  And it wasn't hideously
 expensive ($112.91).

 I could have solved the problem with gigabit switches behind the
 router for lan usage, just as well, and may go to that yet, and move
 back to the old NETGEAR router.  But somehow I expected the cisco to
 be something that was `excitingly' new and fun to play with.

 I'm disappointed in the cisco so far as logging is concerned.

 The logs give only bare information like this:

 Mar 10 10:24:21  - [Firewall Log-PORT SCAN] TCP Packet - 60.173.11.56 -- 
 98.217.231.32
 Mar 10 10:24:21  - [Firewall Log-PORT SCAN] TCP Packet - 60.173.11.56 -- 
 98.217.231.32
 [...]

 No mention of which port is involved.  Not only on port scans but
 ports are never reported.  And of course if you wanted to pursue any
 of it by way of google, you'd need the port number.

 The Old Netgear sent logs like this (wrapped for mail):

  Sat, 2007-07-28 12:00:11 - TCP packet - Source: 161.170.244.20 -
  Destination: 70.131.83.195 - [Invalid sequence number received with
   Reset, dropping packet Src 443 Dst 1385 from WAN]

 ---        -       ---=---       -      

 I went for the cisco instead of a newer `gigabit' NETGEAR after seeing
 several bad reviews about them.  And I just assumed the cisco would
 have as good or better other features.

 Another little problem is that the Cicso had reached its end of life
 and was reported as such by cisco, well before I bought it.  But of
 course, retailers (not cisco) don't bother to give that kind of info,
 but the result is that a kind of blackball list that was part of the
 deal is no longer kept up to date.

 So, cutting to the chase; can anyone recommend from actual use, a home
 lan router that has gigabit lan ports and very configurable/
 informative logging options?

 ps - I'm not interested in running an old linux or openbsd, machine as
 router.  Having a silent cool router the size and weight of a medium
 book is too appealing.


Have you checked out Mikrotik's RB750G? 5 GbE ports:

http://routerboard.com/pricelist/download_file.php?file_id=256

Mikrotik OS is Linux-based, the firewall is Netfilter-based, and it's
Lua-scriptable.

Rgds,
--
Pandu E Poluan
~ IT Optimizer ~
Visit my Blog: http://pepoluan.posterous.com



Re: [gentoo-user] [OT router advice] a router capable of detailed logs

2011-04-19 Thread Stroller

On 19/4/2011, at 4:31am, Harry Putnam wrote:
 ...
 So, cutting to the chase; can anyone recommend from actual use, a home
 lan router that has gigabit lan ports and very configurable/
 informative logging options?
 
 ps - I'm not interested in running an old linux or openbsd, machine as
 router.  Having a silent cool router the size and weight of a medium
 book is too appealing.

Consider OpenWRT. You can run it on something like the Netgear WNR2000, the 
Buffalo WZR-HP-G300NH, or something even cheaper if you don't need wifi.

Stroller.






Re: [gentoo-user] [OT router advice] a router capable of detailed logs

2011-04-19 Thread Paul Hartman
On Tue, Apr 19, 2011 at 5:18 AM, Stroller
strol...@stellar.eclipse.co.uk wrote:

 On 19/4/2011, at 4:31am, Harry Putnam wrote:
 ...
 So, cutting to the chase; can anyone recommend from actual use, a home
 lan router that has gigabit lan ports and very configurable/
 informative logging options?

 ps - I'm not interested in running an old linux or openbsd, machine as
 router.  Having a silent cool router the size and weight of a medium
 book is too appealing.

 Consider OpenWRT. You can run it on something like the Netgear WNR2000, the 
 Buffalo WZR-HP-G300NH, or something even cheaper if you don't need wifi.

I have WZR-HP-G300NH (running DD-WRT), if you don't plan on using wifi
it would be great. The wifi is really unstable and I couldn't
recommend this device if you're a heavy wifi user, but the wired
portion works great, the device itself is by far the fastest I've ever
owned, and it has a USB port so you can attach external storage in
case you want to use it as a server, too.

If your wifi users are limited to web browsing/email it would probably
be okay for that, but if you do anything with persistent open
connections (ssh, gaming, streaming movies) then you'll quickly pull
your hair out in frustration at the constant wifi stalls and
disconnects.

The good news about the bad wifi is that the constant negative reviews
and dissatisfied customers have forced the price down really low, I
got mine for about $50. :)



Re: [gentoo-user] [OT router advice] a router capable of detailed logs

2011-04-19 Thread W.Kenworthy


On Tue, 2011-04-19 at 09:50 -0500, Paul Hartman wrote:
 On Tue, Apr 19, 2011 at 5:18 AM, Stroller
 strol...@stellar.eclipse.co.uk wrote:
 
  On 19/4/2011, at 4:31am, Harry Putnam wrote:
  ...
  So, cutting to the chase; can anyone recommend from actual use, a home
  lan router that has gigabit lan ports and very configurable/
  informative logging options?
 
  ps - I'm not interested in running an old linux or openbsd, machine as
  router.  Having a silent cool router the size and weight of a medium
  book is too appealing.
 
  Consider OpenWRT. You can run it on something like the Netgear WNR2000, the 
  Buffalo WZR-HP-G300NH, or something even cheaper if you don't need wifi.
 
 I have WZR-HP-G300NH (running DD-WRT), if you don't plan on using wifi
 it would be great. The wifi is really unstable and I couldn't
 recommend this device if you're a heavy wifi user, but the wired
 portion works great, the device itself is by far the fastest I've ever
 owned, and it has a USB port so you can attach external storage in
 case you want to use it as a server, too.
 
 If your wifi users are limited to web browsing/email it would probably
 be okay for that, but if you do anything with persistent open
 connections (ssh, gaming, streaming movies) then you'll quickly pull
 your hair out in frustration at the constant wifi stalls and
 disconnects.
 
 The good news about the bad wifi is that the constant negative reviews
 and dissatisfied customers have forced the price down really low, I
 got mine for about $50. :)
 

I have this device and am using Firmware: DD-WRT v24-sp2 (08/07/10) std
- its been totally stable since I dumped the buffalo firmware.  My son
plays windoze online games and I often move large files around as well
as stream mythtv across it - no problems at all.  Until I started
powering the systems down at night (power charges went up :) it would
stay up for over a month at a time and it was never a crash as to why it
was restarted - usually power, or reconfiguration.

BillK





[gentoo-user] [OT router advice] a router capable of detailed logs

2011-04-18 Thread Harry Putnam
This is way OT, but this list is such a great resource I suspect the
advice gotten here will be more to the point. ( I have posted to a
network hardware group as well)

I've bumped my home lan router to a gigabit from the old 10/100
(NETGEAR FVS318).

I made the move for the gigabit lan ports mainly.  That is, I was
happy with other aspects of the old router.  I ended up with a cisco
RVS4000 v2.

The cisco solved the gigabit problem with 4 lan ports and even a
gigabit on the Internet port... (which is probably not really doing
any thing on a cable connection).  And it wasn't hideously
expensive ($112.91).

I could have solved the problem with gigabit switches behind the
router for lan usage, just as well, and may go to that yet, and move
back to the old NETGEAR router.  But somehow I expected the cisco to
be something that was `excitingly' new and fun to play with.

I'm disappointed in the cisco so far as logging is concerned.

The logs give only bare information like this:

Mar 10 10:24:21  - [Firewall Log-PORT SCAN] TCP Packet - 60.173.11.56 -- 
98.217.231.32
Mar 10 10:24:21  - [Firewall Log-PORT SCAN] TCP Packet - 60.173.11.56 -- 
98.217.231.32
[...]

No mention of which port is involved.  Not only on port scans but
ports are never reported.  And of course if you wanted to pursue any
of it by way of google, you'd need the port number.

The Old Netgear sent logs like this (wrapped for mail):

 Sat, 2007-07-28 12:00:11 - TCP packet - Source: 161.170.244.20 -
  Destination: 70.131.83.195 - [Invalid sequence number received with
   Reset, dropping packet Src 443 Dst 1385 from WAN]

----   ---=---   -   

I went for the cisco instead of a newer `gigabit' NETGEAR after seeing
several bad reviews about them.  And I just assumed the cisco would
have as good or better other features.

Another little problem is that the Cicso had reached its end of life
and was reported as such by cisco, well before I bought it.  But of
course, retailers (not cisco) don't bother to give that kind of info,
but the result is that a kind of blackball list that was part of the
deal is no longer kept up to date.

So, cutting to the chase; can anyone recommend from actual use, a home
lan router that has gigabit lan ports and very configurable/
informative logging options?

ps - I'm not interested in running an old linux or openbsd, machine as
router.  Having a silent cool router the size and weight of a medium
book is too appealing.