Re: [swinog] Firewall recommendation for a rack of webservers?

2008-07-18 Diskussionsfäden julien mabillard
:: I would suggest an OpenBSD or OpenBSD-based firewall too. We're using BTW, recent hackathons brought significant improvements not to mention related work from reyk@ about relayd. So as monitoring and load balancing role, it is great design. And beware, you could just love pf and start being

Re: [swinog] Firewall recommendation for a rack of webservers?

2008-06-19 Diskussionsfäden Daniele Guazzoni
pfSense HAS commercial support ! It is provided by BSD Perimeter and Centipede Networks Take a look at www.pfsense.org under support. Open-source and unsupported are two different words. Daniele Manuel Krummenacher wrote: Hello! On Wed, June 18, 2008 2:06 pm, Olivier Mueller wrote: Is there

Re: [swinog] Firewall recommendation for a rack of webservers?

2008-06-18 Diskussionsfäden Beat Siegenthaler
Rainer Duffner wrote: http://pfsense.org/index.php?option=com_contenttask=viewid=44Itemid=50 and start with that. But the customer would also like to see some non open-source-based solutions... : I'd go for a Netscreen model - The funny thing about this: Netscreen and pfSense are both

Re: [swinog] Firewall recommendation for a rack of webservers?

2008-06-18 Diskussionsfäden Rainer Duffner
Beat Siegenthaler schrieb: Rainer Duffner wrote: http://pfsense.org/index.php?option=com_contenttask=viewid=44Itemid=50 and start with that. But the customer would also like to see some non open-source-based solutions... : I'd go for a Netscreen model - The funny thing about this:

Re: [swinog] Firewall recommendation for a rack of webservers?

2008-06-18 Diskussionsfäden Olivier Mueller
On Wed, 2008-06-18 at 15:38 +0200, Rainer Duffner wrote: pfSense is FreeBSD6 ;-) and the next one will be FreeBSD 7 based, yes :) Thanks you all for the feedbacks on the list and by mail, I'll now have fun visiting all your suggestions / urls trying to select the perfect device. Merci

Re: [swinog] Firewall recommendation for a rack of webservers?

2008-06-18 Diskussionsfäden Daniele Guazzoni
Beat Siegenthaler wrote: In this case You will be forced to deploy M$-ISA ;-) Please... He's talking about firewalls... :-) Oliver, I have pfSense in use and you can also have commercial support from them. It's stable and you can run inline-snort with autoblacklist or simple log. I guess