Re: [OmniOS-discuss] Firewall in OmniOS?

[Gary Gendel]

I used OpenIndiana and OmniOS with ipfilter in a router configuration for years without any serious issues. I was also providing DNS, DHCP and IPv6 over v4. However, one of the drawbacks of this is that, if you use this as your WAN/LAN router, you bring your whole network down with the occasional reboot.

Adding my $.02 too.

Gary

On 10/19/2016 11:58 AM, Dan McDonald wrote:

I ended up picking up a MicroTik RB750 for about $50. This is no longer made but the "hEX" replacement looks sweet. These have Cisco-level functionality, a tiny footprint, and low power consumption. I've never looked back. I'm running a split-horizon DNS with hairpin routing rules so the internal network machines get the internal ip addresses for the services. It reboots in a few seconds so there is minimal downtime when I upgrade the software.

I still use ipfilter, but only as a NAT.

Porting one of the others to OmniOS/illumos would require a lot of work.  
(Hell, part of me thinks writing a NAT-only hooks module would be easier.)

My $.02,
Dan

_______________________________________________
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss