Re: halted firewalls

2007-02-25 Thread Emanuele Rocca
* Ludo <[EMAIL PROTECTED]>, [2007-02-25 1:07 +0100]: > I'm actually not doing this for the improved security in ithis > particular case. As this is a home LAN, I don't have tons of > room/pc's. So the gateway in this case is just another pc, and using > this idea I wouldn't have to boot this

Re: halted firewalls

2007-02-25 Thread Alexander Klauer
Hi Ludo, Ludo schrieb: My understanding (which might be wrong) was that once the kernel launches the INIT task, the whole runlevel and boot/shutdown stuff is a user space thing. What do you mean by that? Does that change the situation? It doesn't change the situation for you, because you'r

Re: halted firewalls

2007-02-25 Thread korozion
Why not use something like Coyote firewall, it's a floppy-based firewall/router. No hard drives required and you can set the floppy to write protect or remove it once you've written the configuration and started the box. Maybe it's not quite what a halted system is, but seems like it's close

Re: halted firewalls

2007-02-25 Thread Dr. Nikolaus Klepp
hi! what about a linksys wrt54gl? ~ 60€. install openwrt, read the docs (most is in the wiki) and off you go .. with ~ 9W power consumption. n. > On Sun, Feb 25, 2007 at 01:07:51AM +0100, Ludo wrote: > > As this is a home LAN, I don't have tons of room/pc's. So the gateway > > in this case is j

Re: halted firewalls

2007-02-25 Thread Lothar Ketterer
Hi, On Sun, Feb 25, 2007 at 01:07:51AM +0100, Ludo wrote: > As this is a home LAN, I don't have tons of room/pc's. So the gateway > in this case is just another pc, and using this idea I wouldn't have > to boot this pc for no other reason than "gatewaying". So it's mostly > to avoid running the ga

Re: halted firewalls

2007-02-25 Thread Vassilii Khachaturov
> > I'm actually not doing this for the improved security in ithis particular > > case. As this is a home LAN, I don't have tons of room/pc's. So the gateway > > in this case is just another pc, and using this idea I wouldn't have to > > boot this pc for no other reason than "gatewaying". So it's m

Re: halted firewalls

2007-02-25 Thread Holger Schletz
Hi, > I'm actually not doing this for the improved security in ithis particular > case. As this is a home LAN, I don't have tons of room/pc's. So the gateway > in this case is just another pc, and using this idea I wouldn't have to > boot this pc for no other reason than "gatewaying". So it's most

Re: halted firewalls

2007-02-25 Thread Sam Couter
Ludo <[EMAIL PROTECTED]> wrote: > case is just another pc, and using this idea I wouldn't have to boot this > pc for > no other reason than "gatewaying". So it's mostly to avoid running the > gateway, > because of the added noise, etc. I may have missed some part of the discussion here, but... t

Re: halted firewalls

2007-02-25 Thread Sam Couter
Ludo <[EMAIL PROTECTED]> wrote: > How else does the IP address get released? DHCP leases have a limited lifetime. If they're not renewed by the client within that time they're considered expired. -- Sam Couter | mailto:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] Open

Re: halted firewalls

2007-02-24 Thread Ludo
On 2/24/07, Alexander Klauer <[EMAIL PROTECTED]> wrote: I've just read that article and I'm not entirely convinced of the theoretical security implications stated, in particular, what does the author mean by "having removed all process space"? I'm actually not doing this for the improved securi

Re: halted firewalls

2007-02-24 Thread Ludo
On 2/24/07, Jonas Andradas <[EMAIL PROTECTED]> wrote: Hi Ludo, as far as I know, when a system (at least in Debian) gets its IP through DHCP, it does use a daemon (dhclient or dhclient3, if I am not mistaken). Thus, when this IP is freed, probably you loose the gateway's connectivity to the Inte

Re: halted firewalls

2007-02-24 Thread Alexander Klauer
Ludo schrieb: Hi all, I'm trying to run a halted Debian firewall, as described in http://www.samag.com/documents/s=1824/sam0201d/0201d.htm . I've just read that article and I'm not entirely convinced of the theoretical security implications stated, in particular, what does the author mean by