[SLUG] Firewall Distributions, Questions.

[Dave Hall]

On Tue, 2009-03-03 at 07:30 +1100, Dave Kempe wrote:
> Blindraven wrote:
> >
> > Based on my set-up, which of the following would you recommend and why?
> >
> > pfSense, MoNoWaLL, Clark Connect. (Do you know any others?)
> >
> >
> >   
> ubuntu-server and shorewall. the documentation for shorewall 
> two-interface setup should be all you need.
> 
> http://shorewall.net/two-interface.htm
> 
> You get the most bang for your buck going this route.

It depends on what you want.  If you want to have be able to scale up to
multiple WANs, have complex QoS and routing or failover clustering, then
I would suggest pfSense.  

I use shorewall for small sites which only I have to manage.  If the
client wants to manage the setup, I used to use ipCop, but these days I
just use pfSense.

I often find webGUIs don't expose enough functionality or make things
more complicated than manually edit config files.  This isn't the case
with pfSense.  pfSense exposes a lot of power, without making it
complicated.  The only time I really needed to RTFM when using pfSense
was when I setup my first failover cluster.

Cheers

Dave