Re: [Security Firewall] Florins Firewall

Shade wrote:

> As long as the goal of what MNF is supposed to be doesn't change, I'm 
> all for it. I have always felt that the objective of the MNF project 
> was to produce an enterprise level firewall using strictly Open Source 
> technologies. There are literally hundreds of Open Source firewalls 
> designed for small or home networks. However, once you get into some 
> of the more detailed rulesets and filters required to handle something 
> on a much larger scale, I've found that few (if any) compare to MNF's 
> capabilities combined with its ease of administration. I've always 
> liked the fact that I could pass on basic firewall rule changes to a 
> junior tech with no Linux experience (but not to an MCSE, of 
> course).... :)

For me, the killer features of MNF (1) have been the ability to 
(relatively) easily manage multiple WAN IP addresses, and relatively 
granular firewall rules. Of course, with MNF 1, I had to add the NIC 
aliases manually, but everything else has worked through the web interface.

MNF2 has me practically drooling over these key features:

* ability to manage NIC aliases in the web interface
* ability to create any arbitrary number of zones, including wifi and dmz
* built-in OpenVPN 2.0, and built-in certificate manager (not yet 
deployed, I'm still running the February beta)
* traffic shaping, to prioritize VoIP and de-prioritize BitTorrent 
(haven't yet deployed a working version of this, though)
* urpmi for keeping up-to-date.

This last point suggests keeping it based on Mandriva, but there are 
certainly lots of alternatives.

How about we call it "Florin's Firewall?" ;-)

-- 
John Locke
"Open Source Solutions for Small Business Problems"
published by Charles River Media, June 2004
http://www.freelock.com

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________