Re: router / firewall with PF and carp.

2010-10-02 Thread Patrick Lamaiziere
Le Fri, 01 Oct 2010 08:24:30 -0400, Kevin Kobb a écrit : > Both would probably be fine. However, I would recommend taking a look > at pfsense if I were you. It is made to do what you want without as > much of the overhead as a full blown *BSD install. > > It is easier to configure, update, the d

Re: router / firewall with PF and carp.

2010-10-01 Thread krad
On 1 October 2010 15:34, Kevin Wilcox wrote: > On 1 October 2010 10:16, Daniel Bye > wrote: > > > On Fri, Oct 01, 2010 at 09:40:56AM -0400, Kevin Wilcox wrote: > > >> Krad, I was under the impression that 'audit' from TrustedBSD is built > >> into FreeBSD. Is there a facility in OpenBSD that is

Re: router / firewall with PF and carp.

2010-10-01 Thread Kevin Wilcox
On 1 October 2010 10:16, Daniel Bye wrote: > On Fri, Oct 01, 2010 at 09:40:56AM -0400, Kevin Wilcox wrote: >> Krad, I was under the impression that 'audit' from TrustedBSD is built >> into FreeBSD. Is there a facility in OpenBSD that is "better" or is >> there something in 'audit' that is lackin

Re: router / firewall with PF and carp.

2010-10-01 Thread Daniel Bye
On Fri, Oct 01, 2010 at 09:40:56AM -0400, Kevin Wilcox wrote: > On 1 October 2010 05:29, krad wrote: > > > In my experiance freebsd should work fine. However I would say openbsd is > > probably better suited to your needs, due to its tighter security model > > (auditing) > > Krad, I was under th

Re: router / firewall with PF and carp.

2010-10-01 Thread Kevin Wilcox
On 1 October 2010 05:29, krad wrote: > In my experiance freebsd should work fine. However I would say openbsd is > probably better suited to your needs, due to its tighter security model > (auditing) Krad, I was under the impression that 'audit' from TrustedBSD is built into FreeBSD. Is there a

Re: router / firewall with PF and carp.

2010-10-01 Thread Kevin Kobb
Both would probably be fine. However, I would recommend taking a look at pfsense if I were you. It is made to do what you want without as much of the overhead as a full blown *BSD install. It is easier to configure, update, the documentation is good, and you can get top notch paid support from

Re: router / firewall with PF and carp.

2010-10-01 Thread jorge espada
I can say that both of them are pretty good choice, in my personal experience I had the same configuration that you are planning to implement qith two servers on OpenBsd 4.6 + carp+ bgp as a router in a huge network , the only problem was some well know bug with carp and bgp..that for some reason s

Re: router / firewall with PF and carp.

2010-10-01 Thread krad
On 30 September 2010 23:19, Patrick Lamaiziere wrote: > Hi, > > We are in the process to replace two Cisco Pix firewalls and one Cisco > router with two servers running PF with carp. The network is large > (it is an University) and all will depend on this two machines. > > We have made some tests

router / firewall with PF and carp.

2010-09-30 Thread Patrick Lamaiziere
Hi, We are in the process to replace two Cisco Pix firewalls and one Cisco router with two servers running PF with carp. The network is large (it is an University) and all will depend on this two machines. We have made some tests with OpenBSD, PF and OpenBGPD and it looks to work (but we have to