[ previous ] [ next ] [ threads ]
 From:  Christiaens Joachim <jchristi at oce dot be>
 To:  "'Hilton at QuarkAV dot com'" <Hilton at QuarkAV dot com>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  RE: [m0n0wall] Feature request which would make m0n0wall even bet ter ;)
 Date:  Tue, 27 Jan 2004 16:09:57 +0100
> -----Original Message-----
> From: Hilton Travis [mailto:Hilton at QuarkAV dot com]
> m0n0wall is a firewall.  It isn't a file server, nor is it a 
> BSD distro
> designed to run as a fish tank controller.  I cannot understand why
> people want to compromise the security of a security device by running
> additional software on it that is not designed, suited, or 
> even safe to
> be running on a firewall.
> Ever heard of E-Smith, Clark Connect, BSD, Linux, Windows SBS, etc? 
> These are designed to be modular systems that run extremely 
> well behind
> a secure firewall, work as a modular system, and can easily 
> provide all
> the functionality that a firewall shouldn't.
> Personally, I want a firewall that is a firewall.  I'll have another
> internal, protected, server to run these server functions.  
> Security is
> paramount for a security device, and for your network.
As well as I support your vision for the network of my corporate customers
AND my personal home network, I can also understand another aspect of this
not-so-easy to reach balance between secure and cost-effective.

At the moment, in reality, there are a lot of Windows desktops, directly
connected to the internet, with -at best- a personal software-firewall. This
not only at home-setups, but also for a lot of small businesses!

Something in between could be a firewall with some simple (or complex even)
network services, which could convince the customer of putting at least
something in between his LAN and the big bad internet.

If I make an offer for a travel agency that has 2 workstations, 1 network
printer and a broadband connection, I cannot include a firewall, a
fileserver, and maybe some other servers to conform with best practices and
split things up.

If I can include 1 appliance, I will easily convince them of the advantages,
in security AND in functionality, for a reasonable price.

I usually sell SME-server solutions (aka e-smith). This does everything most
small business customers need, but it is such bloatware.
Having that said, I admit I would love the beauty of m0n0wall (and I really
don't mean only the GUI) to spread into an application like the SME-server,
but this project is a firewall and Manuel is very clear about that. He is
right. He allways is, because it's his project.

OTOH, if anyone is planning to create some kind of all-in-one solution, I
really willing to help in all the ways I can.


Oce enables its customers to manage their documents efficiently and
effectively by offering innovative print and document management products
and services for professional environments.

This e-mail message and any attachment are intended for the sole use of the
recipient(s) named above and may contain information which is confidential
and/or protected by intellectual property rights.
Any use of the information contained herein (including, but not limited to,
total or partial reproduction, communication or distribution in any form) by
other persons than the designated recipient(s) is prohibited.

If you have received this e-mail in error, please notify the sender either
by telephone (0032-2-729.48.11) or by e-mail and delete the material from
any computer.
Oce-Belgium/Oce-Interservices is nor responsible for the correct and
complete transfer of the contents of the sent e-mail, neither for the
receipt on due time.  This e-mail message does not bring about a contractual
obligation for Oce-Belgium/Oce-Interservices.

Thank you for your cooperation.

For further information about Oce-Belgium/Oce-Interservices please see our
website at www.oce.be