|
||||||||
Blocking of ad's along with www sites that are not needed in a business should always take place at the edge (firewall), allowing this sort of traffic to the inside is really BAD, it can allow all sorts of bad things to happen at the workstation level and depending on users to do the right thing? .. We have loaded on m0n0wall the whole list of blocks and find that yes it does take 20 sec longer to load the firewall from a reload but its still under a min to come back up . Heck how many PIX's can say that .. Memory? .. We have found that 256megs of memory handles just about anything we can throw at the firewall .. Running P3 800's on the Firewalls and they barely see 5% CPU usage most of the day. Block at the edge is my vote. Brian -----Original Message----- From: Massimo B. [mailto:ghiblone at tin dot it] Sent: Tuesday, November 09, 2004 4:25 AM To: m0n0wall at lists dot m0n0 dot ch Subject: Re: [m0n0wall] Ad Blocking in m0n0wall Thank's for your opinion. However, I would use the m0n0wall firewall... Of course, if it's possible! Bye. Massimo B. >-- Messaggio originale -- >Date: Tue, 09 Nov 2004 12:39:48 +0100 >From: Vincent Fleuranceau <vincent at bikost dot com> >To: "Massimo B." <ghiblone at tin dot it> >CC: m0n0wall at lists dot m0n0 dot ch >Subject: Re: [m0n0wall] Ad Blocking in m0n0wall > > >-------- Original Message -------- > >> About memory requirement: well, the hosts file may be use a lot of >> memory, but it is not critical (I suppose... hosts file is 200k or less). > >Be objective: don't you think it becomes ugly when your hosts files has >more than 50 entries? > >> About the time to be parsed by php: >> is not necessary a GUI for handle the hosts file, because is not >> necessary edit this file from m0n0wall. > >FYI: in m0n0wall all the system is PHP-driven, not only the GUI... > >> Now: how loading the hosts file in m0n0wall without modify the config.xml? > >Sorry: I'm not so much interested. I see m0n0wall as a firewall only. >If > >I wanted to use something like IPcop (with Snort + Squid + DansGuardian >modules, etc.) I would use IPcop, not m0n0wwall! > >Cheers, > >-- Vincent > > > >--------------------------------------------------------------------- >To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch >For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > --------------------------------------------------------------------- To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch |