From owner-freebsd-questions Fri Feb 19 15:40:33 1999 Delivered-To: freebsd-questions@freebsd.org Received: from gongshow.masterplan.org (masterplan.powersurfr.com [24.108.43.174]) by hub.freebsd.org (Postfix) with ESMTP id 66D0711412 for ; Fri, 19 Feb 1999 15:40:26 -0800 (PST) (envelope-from jbg@masterplan.org) Received: from infomat (infomat.precident.com [192.168.4.2]) by gongshow.masterplan.org (8.8.8/8.8.8) with SMTP id QAA06043 for ; Fri, 19 Feb 1999 16:40:24 -0700 (MST) (envelope-from jbg@masterplan.org) Message-Id: <199902192340.QAA06043@gongshow.masterplan.org> From: jbg@masterplan.org (Jason George) To: freebsd-questions@freebsd.org Subject: Re: Firewall Organization: The Master Plan Always Fails... Date: Fri, 19 Feb 1999 23:41:09 GMT Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG He asked about a firewall, not a Squid proxy. A 486 class box can act easily as a firewall between two ethernet segments. Been there. Done that. I even have 386s running as routers with basic packet filtering on high speed DSL connections. The smallest of which is a 386sx16 with 5M of RAM and an 85M disk running at the end of a 2Mbit symmetrical DSL line. It's never missed a beat and has been rebooted once in a 6 month time frame. PCI busses and bigger processors help when you have sustained traffic routing through multiple segments and a lot of IPFW rules. --Jason j.b.georgeieee.org jbgmasterplan.org >From: Gunnar Flygt >On Fri, Feb 19, 1999 at 11:23:58AM +0100, Ladislav Kostal wrote: >> Hi all, >> >> I want to build firewall for our faculty and I would like to know what are >> the requirements for such computer. >> Faster processor or more memory or fast disks ? > >The only thing I know, comparing to what we've got at work, is that you >need a lot of disk space and they should be fast disks! And I guess you >need a lot of memory on the machine too. Look at >http://cache.is.co.za/squid/ > >This is what I read at the FAQ: > >In late 1998, if you are buying a new machine for a cache, I would >recommend the following configuration: > > 300 MHz Pentium II CPU > 512 MB RAM > Five 9 GB UW-SCSI disks > > Your system disk, and logfile disk can probably be IDE > without losing any cache performance. > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message