elbles wrote:Most of the time, I'm inclined to agree that Linksys routers and the like such, but some of their wireless access points/routers run Linux, which isn't a bad thing, especially with the ease with which the firmware can be modified. Though, when I finally get around to replacing the Linksys router up at home, it'll be running either FreeBSD or OpenBSD on an Alpha machine, or possibly NetBSD on an older Mac . . . security through obscurity might not be the best idea, but given all the targets for the x86 platform, and the fact that the other platforms are an order of magnitude greater than x86, I'll be happy with that.
Yeah, OpenBSD and FreeBSD rock for firewalls. Mine use Linux that I put through some hardcore tweaks to get it more "secure". I get so carried away that I've had to create a document for myself so I can keep track of it all.
The main reason I use Linux is because I like IPTables better than PF, it's just a personal choice because I know it better, not because it is necessarily better. IPTables is a pain to compile and run on BSD.
What I do need to do though is set up a hot-swap spare box. My firewalls that I built for myself and my family are made out of old IBM PC 300GL Pentium 3 machines running 512M of RAM and 10G hard drive with three NICs.
The hardware is WAY overkill, but they were free, and I also run Squid Proxy and DansGuardian content filtering on them, so the extra horsepower is nice to have.