Re: Linux, Windows, and cable modem

From: Java Jive (java_at_evij.com)
Date: 05/09/04

  • Next message: Chaos Master: "Running a "live" Linux distro when PC can't boot from CD" 
    Date: Sun, 9 May 2004 18:39:53 +0100

    "Bit Twister" <BitTwister@localhost.localdomain> wrote in message
    news:slrnc9sla4.o2b.BitTwister@wb.home.invalid...
    > On Sun, 9 May 2004 08:15:28 +0100, Java Jive wrote:
    > >
    > > Yes, no toss up at all between an off-the-shelf box and:
    > >
    > > A) Having to find:
    > > 1) A suitable 300MHz box with two NICs
    >
    > 300 was just a low end example.
    >
    > > 2) Somewhere to put it in your average pushed-for-space,
    >
    > http://www.aerocool.com.tw/aerocool-files-v3/lubic/gallery.htm
    > http://envador.com/

    Jeez! The OP presumably wants a solution to sit quietly in a corner and
    work, not an impractical dust trap posing as a work of art with a capital
    'F' :-)

    > > pushed-for-power-outlets home
    >
    > You plug system into same place you would plug router.

    Might not be practicable. The box itself is much bigger, without even
    considering whether it should be permanently connected to a monitor (which
    in itself would require an extra power outlet). Whether or not the latter,
    but particularly if so, you might not want it cluttering up a small living
    room. I'd probably have to put it under the stairs, where there is no power,
    so I'd have to get power there somehow.

    > > 3) Routing for the extra LAN cables required to connect it up
    >
    > I would move cable modem cable from hub to linux box and add cable from
    > linux to hub.

    See above and other reply.

    > > B) Having to decide:
    > > 1) What OS to use, Linux or Windows
    >
    > Linux clear winner there. Do not want to spend another $200+ for
    > Longhorn to get security fixes.

    But previous posters have suggested that Linux firewalls are not for the
    technically less well-off, and seeing as the OP is asking what to me is a
    simple question with a fairly obvious answer, I get the impression that
    (s)he may not be particularly technically well-off. Hence, suggesting that
    (s)he set up another Linux box to avoid meddling with the one already there
    seems less than helpful to me.

    > > C) On chosen OS, having to learn how to install and configure:
    > > 1) DHCP Server
    >
    > No, use static lan adddresses.

    But that doesn't give the same functionality as the off-the-shelf solution
    (see other reply posted earlier)

    > > 2) DNS Server, possibly
    >
    > No, use isp provided DNS Servers.

    I said 'possibly', bummer if you found you had to keep typing in the IP of
    your other PC instead of its name though!

    > > 3) Network routing through the box
    >
    > Firewall does that automagically when you setup forwarding rules.
    >
    > > 4) Firewall, which on a Linux box it was suggested that (s)he
    > > avoid configuring anyway
    >
    > Say what! Guessing you are talking about a newbie running on the
    > firewall box comment.
    >
    > You want the least amount of software on a firewall box and
    > you are not supposed to be surfing and what not on a firewall box.
    > We know the newbie will be playing around and just like a loaded
    > automatic you do not play russan roulette.

    Yes, so, assuming as suggested that the OP doesn't know how to set up a
    Linux firewall, why do you propose an option that requires him/her to be
    able to do so?

    > > Even if all that were to be accomplished, over time the cost of the
    extra
    > > electricity used by a third box (probably about 3 or 4 lightbulbs as
    opposed
    > > to 1), would erode any money saved
    >
    > You forgot wasted AC cooling cost to keep room at same temp.
    > Got me there, pc would eat more power than router.
    >
    > > on the original purchase, and how long
    > > can one assume a second-hand box will last before needing repair?
    >
    > Hmmm, I had to buy a $1.87 cmos battery for my 8 year old box.

    And I've had to replace two HDs in the last few years.

    > Except for capacitors, second box can last longer than new machine
    > bought from the factory. Electronic Infant death syndrome.

    But you have a warranty period on the new item.

    > > I wouldn't count myself as a Linux expert,
    >
    > We knew that because you are still using Microsoft Outlook Express. :-)
    > That's a joke son, a joke. 8-)

    I can take a joke well enough, but the fact that you comment on that shows
    that you haven't grasped the fact that most people just want a PC to do a
    job of work, not to spend hours tinkering with it. For text, OE works quite
    well for me, it's free, and it's already there, so I use it. Of course, it's
    sh*te for binaries, so I use something else for those.

    Oh! Er :-)

    > > but suggesting that the OP complicate his/her situation further by
    > > buying a third computer doesn't strike me as being good advice for
    > > the situation.
    >
    > > Sorry, but it had to be said.
    >
    > Oh, we understand.
    >
    > Noticed you did not mention any firewall router downside items.
    >
    > I have seen posts where the router vendor sent an update which removed
    > packet state monitoring security feature. You had to buy the next
    > level rounter to get the same security you had already paid for.

    Yes, good reason for backing up before flashing a new update, so's you can
    restore.

    > Vendors quit supporting router firmware pretty quick to get you to
    > upgrade to new hardware.

    I've had mine some years now, and recently found a new update on the
    vendors' site, but I don't doubt that this will cease sometime. However,
    updates have usually fixed bugs or supplied new functionality. Given that
    mine is working ok, I'll use it until it fails.

    > Routers can support only so many rules. I am always adding _new ports
    > to not log_ with each new virus but still want to see other attempts.
    >
    > Routers can be overrun with DOS attacks.

    I don't want to tempt fate, but after initial set up I've never had to
    change the rules in mine, and have never yet suffered a DOS (that's not a
    challenge btw :-).

    > Seen posts where users had to backdown an upgrade due to vendor bugs
    > which was to fix other bugs.
    > Sound familiar. :)

    Yes, but that could equally well happen with an update to an OS or
    firewall/AV software running on an intermediary PC. 

    ---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.676 / Virus Database: 438 - Release Date: 03/05/2004
  • Next message: Chaos Master: "Running a "live" Linux distro when PC can't boot from CD"

    Relevant Pages

    • Re: Low Power Hardware for a Linux Based Router / Firewall
      ... RH 6.2 based firewall that I built many years ago, ... its firmware is embarassingly buggy. ... build my own router / firewall - based on Linux. ... but rather use very low power platform - preferrably less ...
      (alt.comp.hardware.pc-homebuilt)
    • Re: 56k dial up on laptop 802.11G ?
      ... >>> Linux firewall is not a firewall... ... NAT router? ... traffic can be set like it can be set for packet filtering like they can be ...
      (alt.internet.wireless)
    • RE: Home Security.
      ... Subject: Home Security. ... I would suggest using linux as your router. ... Other than that, as long as you set your firewall up right, you ...
      (Security-Basics)
    • Re: Replaced NT 4 Server with Linux
      ... Maybe later when i will be more confidential with linux. ... Cisco both with the same configuration i'm doing now with your help. ... > off by a second line of defense (the Linux firewall machine you don't ... > router and keeping track of connections, running IDS's, etc - your Cisco ...
      (comp.os.linux.security)
    • Re: LanMan98 problem
      ... do I really need to have Zone Alarm running on the ... >> has a firewall, use that. ... >>> Second point with regards to the router, NAT enabled, so do I need to ... > As to Linux, rather, pointless. ...
      (comp.sys.acorn.networking)