On 21 September 2012 14:29, Vieri <[email protected]> wrote: > Hi, > > How "unstable" would it be to install a database server such as MySQL on > pfSense? > Why would you not recommend installing MySQL on pfSense, supposing I'd want > it to do more than firewalling (apart from the possible MySQL software > "security" leaks).
Hello Vieri, The whole point of a firewall is to add security to your infrastructure. The way pfSense acheives this, is by acting as a secure entry point for your network. One of the reasons pfSense is secure, is that it only runs a limited set of services, thus minimizing the risk of potential threats posed by flaws in the programs/services running on the pfSense machine. By introducing more programs/services on the pfSense machine that doesn't really have *anything* to do with a firewall, you add an extra unnecessary layer of potential threats that might be exposed if someone gains access to your pfSense box or machines sitting behind it. The simple rule of firewalling: don't run anything that isn't needed on your firewall, keep it simple, keep it safe, and you'll be able to sleep tight at night :) You'd do yourself a *huge* favour by ditching your plans of getting mysql to run on your pfSense, and run it on another machine on your network. -- Yours sincerely Jostein Elvaker Haande "A free society is a place where it is safe to be unpopular" - Adlai Stevenson http://tolecnal.net -- tolecnal at tolecnal dot net _______________________________________________ List mailing list [email protected] http://lists.pfsense.org/mailman/listinfo/list
