[ previous ] [ next ] [ threads ]
 
 From:  Vincent Fleuranceau <vincent at bikost dot com>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] Ad Blocking in m0n0wall
 Date:  Wed, 10 Nov 2004 09:01:33 +0100
-------- Original Message --------

> Blocking of ad's along with www sites that are not needed in a business
> should always take place at the edge (firewall), allowing this sort of
> traffic to the inside is really BAD, it can allow all sorts of bad things to
> happen at the workstation level and depending on users to do the right
> thing? .. We have loaded on m0n0wall the whole list of blocks and find that
> yes it does take 20 sec longer to load the firewall from a reload but its
> still under a min to come back up . Heck how many PIX's can say that ..
> Memory? .. We have found that 256megs of memory handles just about anything
> we can throw at the firewall .. Running P3 800's on the Firewalls and they
> barely see 5% CPU usage most of the day.
> 
> Block at the edge is my vote.
> 

What about Soekris net4501 boxes with 133 MHz CPU and 64 Mb RAM?

-- Vincent