The Ethical Hacker Network - options for DMZ/Firewall solution

Latest Additions

Who's Online

MrMister

Newbie

Offline

Posts: 3

options for DMZ/Firewall solution

« on: October 08, 2010, 01:52:28 PM »

I was looking to implement a DMZ to seperate untrusted public from trusted LAN.

From experience, can anybody suggest a good *nix based solution for perimiter firewall/router?

I've looked a zeroshell and ClearOS...hoping somebody can share experiences they have encounter down this road.

im new here by the way, this place has an amazing amount of good information Grin


	Logged

ajohnson

Recruiters
Hero Member

Offline

Posts: 1057

aka dynamik

Re: options for DMZ/Firewall solution

« Reply #1 on: October 08, 2010, 05:23:24 PM »

Welcome to the forums!

Check out: http://www.pfsense.org/


	Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.

COm_BOY

Full Member

Offline

Posts: 129

LivinG DeaD

Re: options for DMZ/Firewall solution

« Reply #2 on: October 08, 2010, 05:32:25 PM »

Pfsence is a good choice , there are couple of similar stuff in the area but pfsence is a good tested one by several organizations along with that it is based on BSD system rather then Linux which gives you more stability and security I believe


	Logged

It has become appallingly obvious that our technology has exceeded our humanity.

MrMister

Newbie

Offline

Posts: 3

Re: options for DMZ/Firewall solution

« Reply #3 on: October 08, 2010, 09:06:56 PM »

thanks, this should work well.

ive been looking to get my hands on a bsd system for some time...ill repost after ive tested it out this weekend.


	Logged

MaXe

Hero Member

Offline

Posts: 669

I've just upgraded myself to a cyborg muahahaa!!1

Re: options for DMZ/Firewall solution

« Reply #4 on: October 09, 2010, 10:17:13 AM »

Quote from: MrMister on October 08, 2010, 09:06:56 PM

thanks, this should work well.

ive been looking to get my hands on a bsd system for some time...ill repost after ive tested it out this weekend.

FreeBSD

There you go: www.freebsd.org/ Wink


	Logged

I'm an InterN0T'er

MrMister

Newbie

Offline

Posts: 3

Re: options for DMZ/Firewall solution

« Reply #5 on: October 12, 2010, 05:12:40 PM »

my pfsense box is up and running. so far so good Grin

its nice to be able to watch all incoming and outgoing connections on the perimiter. the default rules that came with install were sufficient enough for me to watch the traffic for awhile....i wrote a few custom chains to block some un-recognized connections. tons of features in this little box, its pretty cool.

now is time to implement the DMZ. i need to collect some equiment before hand...catalyst 2950, patch cables, and another NIC for the webserver. still playing with the idea of running my own DNS servers....virtualization could help there...need more research tho.

once i've configured the new network, ill post up any tricks or configuration tips I find. hopefully they will help another soul walking down this path. thanks for the suggestions!