Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 28 Apr 2001 10:03:59 -0400
From:      bsd@shell.coffey-web.net
To:        <freebsd-isp@freebsd.org>
Subject:   ipfw and ISP's.
Message-ID:  <005a01c0cfec$1303c6e0$6401a8c0@bduross>

next in thread | raw e-mail | index | archive | help
Hello,
    I am new to the list as of today. I work for a small ISP in Michigan, we
have 2 T1's out to different providers in which we run BGP on a Cisco 3640.
My question is this: We are looking for a way to filter traffic (if needed,
due to an attack or similar) inbound or outbound to our network. I believe I
could do this with a dual nic configuration on a FreeBSD machine with ipfw.
Would the machine be able to handle the traffic? and if so, what kind of
specs would you reccomend for a machine to do 3mb/s of bandwidth? We have a
DS3 coming in the soon months, would the machine be able to handle even
that? Here is a diagram (in my great ascii skills.. :/)




2 T1's ----------->Cisco 3640 -------->FreeBSD ipfw box -------->Cisco
3500XL Switch ------>rest of network(dialupandothers)

 Is this feasuble(sp)? Would appreciate any comments or reccomendations on
this topic.

TIA,
Brian S. DuRoss
bsd@shell.coffey-web.net


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?005a01c0cfec$1303c6e0$6401a8c0>