Re: Which Hardware for Firewall

2006-04-11 Thread Giancarlo Razzolini
Falk Husemann wrote: Hello misc! We're using OpenBSD on our Hardware since 2003 and have run our Firewall on OpenBSD since that time too (always following -STABLE). Now the box i once built for that purpose has broken down and I'm in need of a replacement I'll assemble myself again. The box

Which Hardware for Firewall

2006-04-10 Thread Falk Husemann
Hello misc! We're using OpenBSD on our Hardware since 2003 and have run our Firewall on OpenBSD since that time too (always following -STABLE). Now the box i once built for that purpose has broken down and I'm in need of a replacement I'll assemble myself again. The box serves a squid, a

Re: Which Hardware for Firewall

2006-04-10 Thread Martin Schröder
On 2006-04-10 13:00:23 +0200, Falk Husemann wrote: Now the box i once built for that purpose has broken down and I'm in need of a replacement I'll assemble myself again. The box serves a squid, a pf (with 2 and 1/2 pages DinA4 ruleset), named and httpd-SSL I'm happily running a FW with

Re: Which Hardware for Firewall

2006-04-10 Thread Joachim Schipper
On Mon, Apr 10, 2006 at 01:00:23PM +0200, Falk Husemann wrote: Hello misc! We're using OpenBSD on our Hardware since 2003 and have run our Firewall on OpenBSD since that time too (always following -STABLE). Now the box i once built for that purpose has broken down and I'm in need of a

Re: Which Hardware for Firewall

2006-04-10 Thread Stuart Henderson
The hardware will be on the low to medium end (budget 400-600 EURO). Which processor architecture is faster for firewalling purposes? pf runs in kernelspace AFAIK, so will dual-core be useless? AMD64? Pentium 4? Unless you're pushing lots of traffic, you don't describe anything

Re: Which Hardware for Firewall

2006-04-10 Thread Joachim Schipper
On Mon, Apr 10, 2006 at 03:55:44PM +0100, Stuart Henderson wrote: Joachim Schipper wrote: Falk Huseman wrote: You might also want to take a look at the 'async' mount option. Horrible filesystem damage is just around the corner, but it's not like that matters all that much for Squid's