Mick <michaelkintzios <at> gmail.com> writes:

> > > > BANG! get hacked ... in the worst case: unrecognized...

> > thank you very much for all tips and trick on this topic. The only
> > router/dsl-modem I own is the own I got from my first DSL provider
> > in times, when the DSL modem/router was not controlled by the
> > provider ;)
> > So the chain has only one link.

Perhaps you need to convert an old pc to a firewall? If you look at several
of the associative thread lately, you can see that useful gentoo based
appliances, such as a robust firewall, are strictly the domain of (gentoo)
experts. But it does not have to be that way. A secure firewall could be
avaiable on the gentoo platform. However, atm, we struggle with offering a
simple if not guided installation proceedure for gentoo linux. Let us hope
that the Project::Installer will result in an offering where somebody could
then define how to build a gentoo-centric firewall for our user base. Until
then I'd suggest using a linux distro specifically tuned to building a
firewall with a wireless interface support [1].

> > May be I get my tablet rooted and will able to convince the kernel
> > to accept an USB/Ethernet USB-gadget (or how it is called). Wifi/WLAN
> > is a weird thing. I dont trust it that far, as I trust a good ole
> > cable going from 'A' to 'B'... ;)
> > 
> > A little old school, but who cares. Better safe than sorry...
> > 
> > Thanks a lot again!
> > Best regards,
> > Meino
> 
> I didn't answer immediately, because I am not entirely clear what is the 
> attack vector that you are worried about.

True. But we could offer a generic gentoo firewall, from which folks build
additional feature into for their needs beyond the basics.


> I you are going to use your PC to create a wireless access point, so 
> that the tablet can wirelessly connect to the Internet through this, 
> then using WPA2-CCMP encryption of your wireless connection should be 
> enough for most  practical purposes.

The number of 'gadgets' with wireless ethernet is currently exploding
on many markets. Inclusion of connecting, routing and securing wireless
devices via  gentoo centric firewall is definitely an opportunity for the
greater gentoo community. It think leveraging such a project on
top of the new Project::Installer offering is something that happens.

I'd be most curious to see a gentoo-embedded-firewall, that runs on a
variety of gentoo-embedded arch's such as PPC, arm7v, arm8v specifically.
That way low cost (low power consumption embedded boards) could be
purchased, setup and deploy for our userbase and to attract new gentoo members.


James
[1] http://www.tecmint.com/install-ipfire-firewall-distribution/


Reply via email to