«

Has any one had any experience of using this solution for Firewall etc

http://www.clarkconnect.com

collector«NZ wrote:
> Has any one had any experience of using this solution for Firewall etc
>
> http://www.clarkconnect.com

I had a play with it a long time ago, it is quite nice but I didn't need
all the services so instead saved some money and went with smoothwall,
though I ended up adding tons of free addons into surgemail to get a lot
of extra functionality. I would do away with surgewall probably too but
my adsl modem is very unstable when used as a router...

collector«NZ wrote:
> Has any one had any experience of using this solution for Firewall etc
>
> http://www.clarkconnect.com

Yes. It works, but running mail, DB and suchlike on the firewall box
sort of negates the firewall functionality and effectively leaves you
with a server that has routing functionality and no firewall between it
and t'internet.

EMB wrote:
> collector«NZ wrote:
>> Has any one had any experience of using this solution for Firewall etc
>>
>> http://www.clarkconnect.com
>
> Yes. It works, but running mail, DB and suchlike on the firewall box
> sort of negates the firewall functionality and effectively leaves you
> with a server that has routing functionality and no firewall between it
> and t'internet.
Agreed but of course horses for courses and I am not looking for
enterprise security

In message <4720469c$>, collector«NZ wrote:

> ... I am not looking for enterprise security

The script kiddies don't know whether you're an enterprise or not, they
attack everybody's systems just the same.

I got this USB ADSL modem fired up for the first time, and within seconds I
saw entries appearing within my system log of password-guessing attempts on
the SSH port.

Lawrence D'Oliveiro wrote:
> In message <4720469c$>, collector«NZ wrote:
>
>> ... I am not looking for enterprise security
>
> The script kiddies don't know whether you're an enterprise or not, they
> attack everybody's systems just the same.
>
> I got this USB ADSL modem fired up for the first time, and within seconds I
> saw entries appearing within my system log of password-guessing attempts on
> the SSH port.
Not worried if they do have a go, wouldn't be to concerned if they even
got in, thats what I mean by not being enterprise. Now on the other hand
I use nothing but cisco gear on my lan/wan at work, it is as tight as we
can make it without strangling it

In message <4720547a$>, collector«NZ wrote:

> Lawrence D'Oliveiro wrote:
>
>> In message <4720469c$>, collector«NZ wrote:
>>
>>> ... I am not looking for enterprise security
>>
>> The script kiddies don't know whether you're an enterprise or not, they
>> attack everybody's systems just the same.
>>
>> I got this USB ADSL modem fired up for the first time, and within seconds
>> I saw entries appearing within my system log of password-guessing
>> attempts on the SSH port.
>
> Not worried if they do have a go, wouldn't be to concerned if they even
> got in, thats what I mean by not being enterprise.

That's an antisocial attitude. Even if you don't care that they pwn your
box, they can then use it as a platform for attacking others, as part of a
botnet. If you let them do that, then you have to bear part of the blame if
it happens. As far as I'm concerned, you would deserve to be cut off by
your ISP.

collector«NZ wrote:
> Has any one had any experience of using this solution for Firewall etc
>
> http://www.clarkconnect.com
looks a lot like e-smith or should i say sme server there is a free
version cant remember the the name of it but i think the site was named
contribs.org or something

--
http://cooze.co.nz home of the RecyclerMan aka Robert Cooze

/ __/ / / / / /__ / / ___/ / __/ / / / |/ / /__ /
/ / / /_/ / / /_/ / _-' / __/ / / / /_/ / / /| / _-'
___\ ____/ ____/ /___/ /____/ /_/ ___\ ____/ /_/ /_/ |_/ /___/

On Thu, 25 Oct 2007 21:10:47 +1300, Lawrence D'Oliveiro wrote:

> In message <4720469c$>, collector«NZ wrote:
>
>> ... I am not looking for enterprise security
>
> The script kiddies don't know whether you're an enterprise or not, they
> attack everybody's systems just the same.
>
> I got this USB ADSL modem fired up for the first time, and within
> seconds I saw entries appearing within my system log of
> password-guessing attempts on the SSH port.

Depressing isn't it. Must be school holidays somewhere. However, I just
don't use ADSL modems, as if the break in to that, they're on your pc
already. A remote router+network gives to that extra level...

Unless you're using it on a dedicated firewall, of cource.

I find that denyhosts is fairly useful.

In message <ffufhq$gvj$>, Steve wrote:

> However, I just don't use ADSL modems, as if the break in to that, they're
> on your pc already. A remote router+network gives to that extra level...

Trouble is, I need to access some services that my ADSL router can't cope
with. Hence the modem.

> Unless you're using it on a dedicated firewall, of cource.

It's going to be connected to a Linux box. That helps.

> I find that denyhosts is fairly useful.

I wrote my own script, block_ssh_guessers, before I found out about
denyhosts. I've got a whole bunch of clients' machines protected with that.
I was also quite excited to read about the iptables "tarpit" option--that
sounded like so much more fun than just blocking the bastards--get them
tangled up in phantom connections that consume their resources and refuse
to go away.

Unfortunately, the code for that isn't in the standard kernel--you have to
get a patch from netfilter.org. Even more unfortunately, that patch doesn't
work against a 2.6.23 kernel: you get compilation errors saying "'struct
sk_buff' has no member named 'nh'". Sigh...