[CLUE-Tech] LinkSys vs. spare PC

[David Anselmi]

Having just gotten DSL, and soon to get new hardware that will free up a
486 for Linux, I've been thinking about this too.

A friend at work has one of these LinkSys boxes.  It seems to do what he
needs, but I'm not sure how configurable it is.  Can a LinkSys box do
everything IPTables (or Chains) does, or does it just block specified
ports?  Sorry, I don't know.

My friend misses the logging that a software firewall does.  The
hardware boxes don't seem to show you much about what they're doing and
why.

Another thing I haven't looked at yet is whether to put one or two NIC
cards in the 486.  I figure a walk through the HOW-Tos will help answer
that, but haven't gotten there yet.  At the meeting last Tue, someone
mentioned that 2 cards was easier.  I'd appreciate other comments.

Dave

Roger Frank wrote:

> At MicroCenter they sell a box for about $100 that seems to
> do everything that my spare PC with ClarkConnect does:
> firewall, masquerading, etc.  I host www.linuxclassroom.org
> on the PC in my basement and I thought I couldn't do that
> behind an off-the shelf firewall.  But I installed a LinkSys
> box between my brother's DSL and his two computers
> and I discovered that I could have specific ports go through
> to specific PCs on the inside network, so I could
>
> So my questions are these: is a PC with a Linux-based firewall
> any better or any worse that a commercial product such as
> the LinkSys?  Is there anything that would make me choose
> one over the other?  Does the commercial box do everything
> that the Linux PC does, and do it properly?
>
> ---
> Roger Frank
> _______________________________________________
> CLUE-Tech mailing list
> CLUE-Tech at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-tech


Received: from dnvrpop2.dnvr.uswest.net (pop.dnvr.uswest.net [206.196.128.4])
	by clue.denver.co.us (8.9.3/8.9.3) with SMTP id TAA02207
	for <clue-tech at clue.denver.co.us>; Fri, 13 Apr 2001 19:58:10 -0600
Received: (qmail 76928 invoked by uid 0); 14 Apr 2001 01:06:21 -0000
Received: from unknown (HELO ?192.168.1.100?) (63.227.56.141)
  by pop.dnvr.uswest.net with SMTP; 14 Apr 2001 01:06:21 -0000
Date: 13 Apr 2001 13:06:16 -0600
Message-Id: <987188783.2049.0.camel at localhost.localdomain>
From: "Joel Cohen" <cjabbe at qwest.net>
To: clue-tech at clue.denver.co.us
Subject: Re: [CLUE-Tech] LinkSys vs. spare PC
In-Reply-To: <01041318273300.13563 at shadow.sage.net>
References: <01041318273300.13563 at shadow.sage.net>
Content-Type: text/plain
X-Mailer: Evolution/0.10+cvs.2001.04.11.08.00 (Preview Release)
Mime-Version: 1.0
Sender: clue-tech-admin at clue.denver.co.us
Errors-To: clue-tech-admin at clue.denver.co.us
X-BeenThere: clue-tech at clue.denver.co.us
X-Mailman-Version: 2.0beta2
Precedence: bulk
Reply-To: clue-tech at clue.denver.co.us
List-Id: CLUE technical discussions, questions and answers. <clue-tech.clue.denver.co.us>

I have the same box. It is a VERY good firewall, and it is configurable
in the same way as a softwore firewall. It does a few things, like
IpSec, which most software firewalls don't do. And it is MUCH easier to
set up than a Linux-based firewall. Through the admin screen, you can
filter out anything you want. If you want to see how well it really
works, go to grc.com, and try the Shields Up test.
 
On 13 Apr 2001 18:27:33 -0600, Roger Frank wrote:
> At MicroCenter they sell a box for about $100 that seems to
> do everything that my spare PC with ClarkConnect does:
> firewall, masquerading, etc.  I host www.linuxclassroom.org
> on the PC in my basement and I thought I couldn't do that
> behind an off-the shelf firewall.  But I installed a LinkSys
> box between my brother's DSL and his two computers
> and I discovered that I could have specific ports go through
> to specific PCs on the inside network, so I could 
> 
> So my questions are these: is a PC with a Linux-based firewall
> any better or any worse that a commercial product such as
> the LinkSys?  Is there anything that would make me choose 
> one over the other?  Does the commercial box do everything
> that the Linux PC does, and do it properly?
> 
> ---
> Roger Frank
> _______________________________________________
> CLUE-Tech mailing list
> CLUE-Tech at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-tech
>