Hi All,
What I'd really like to see is for m0n0wall to provide proper
application-layer filtering and then to have a separate m0n0cache box.
Right now, m0n0wall (and most BSD/Linux based firewalls) only provides
packet-filtering functionality, and whilst being stateful, this is only
a small part of the overall firewalling needed today with an untold
number of protocols using Port 80 (for instance).
If m0n0wall would allow only http traffic (for instance) on port 80 and
block Skype traffic (as an example), and have this all configurable in
the UI, then m0n0wall would be a really, really useful firewall. As it
stands, it provides really nice routing functionality and basic
packet-filtering firewall functionality.
I agree that the cache should be on a separate box to keep m0n0wall's
goal of embedded PCs alive and kicking (I run mine on a Soekris box,
myself).
--
Regards,
Hilton Travis Phone: +61 (0)7 3344 3889
(Brisbane, Australia) Phone: +61 (0)419 792 394
Manager, Quark IT http://www.quarkit.com.au
Quark Group http://quarkgroup.com.au/
Microsoft Small Business Specialists
http://www.threatcode.com/ <-- its now time to shame poor coders
into writing code that is acceptable for use on today's networks
War doesn't determine who is right. War determines who is left.
This document and any attachments are for the intended recipient
only. It may contain confidential, privileged or copyright
material which must not be disclosed or distributed.
> -----Original Message-----
> From: Jonathan De Graeve [mailto:Jonathan dot De dot Graeve at imelda dot be]
> Sent: Wednesday, 14 December 2005 04:24
>
> I knew that pfsense has some squid package.
>
> Anyone had this already running?
>
> Please provide screenshots for the gui etc...
>
> Does it boot from flash and stores the cache elements on local
> disks?
>
> Thx in advance
>
> J.
>
> > -----Oorspronkelijk bericht-----
> > Van: Bjoern Euler (lists at edain) [mailto:lists at edain dot de]
> > Verzonden: dinsdag 13 december 2005 18:53
> > Aan: m0n0wall dash dev at lists dot m0n0 dot ch
> >
> > Jonathan De Graeve wrote:
> >
> > > I searched on the net for a free distro for what I would
> > > like todo but found none (if any knows one, let me know)
> > >
> >
> > Hi,
> >
> > what about pfsense? Maybe it is possible to use their squid
> > package for your purpose.
> >
> > Best regards
> >
> > -Bjoern Euler
|