 CjaicemanPremium,MVM
join:2004-10-12
Parker, CO
kudos:2
 ·Comcast Business..
2 edits | [Other] Smoothwall vs. m0n0wall Ok, so heres the situation. I am looking to replace my Linksys WRT54GS. Its not because the Linksys is failing or anything like that, I just want to try some open source projects on an older computer to see if I can pick up some performance on the internet. The specs of the computer are:
Intel P4 @ 1.3GHz
384MB or RDRAM
No HDD
48x CD-ROM
FDD
Yes, it does have 2 NICs in it.
What I want it to do:
*VPN server - able to handle up to 5 connections at any given time.
*DHCP Server
*Remote manageable from the internet
*Port forwarding for website, Teamspeak, FTP server, remote desktop
*Static DHCP for the server + APs
*DynDNS.org compatible
*headless operation would be preferable(no monitor, mouse, keyboard).
*Boot off of CD would be preferable. |
|
 DaSneaky1Done wall to block them allPremium,MVM
join:2001-03-29
The Lou | m0n0wall is my preference, but it only supports zoneedit dyndns. But, it shouldn't present a problem.
--
:: my trivial ramblings :: |
|
 fegulPremium
join:2004-08-23
united state
kudos:1 | reply to Cjaiceman
m0n0wall |
|
CjaicemanPremium,MVM
join:2004-10-12
Parker, CO
kudos:2 Reviews:
·Comcast Business..
| reply to Cjaiceman
I have been digging around and it looks like M0n0wall is the winner. I do have one more question though, on their website it looks like some are using it to connect over 500 computers. The only problem I have with that is when I try to setup more than 1 IP range (ex: 192.168.0.1 through 192.168.1.254) no computers will connect. I'm sure its something to do with the subnet, but I just can't figure it out. I'm setting the subnet to 24 and 255.255.255.0. Its not that I need it now, but I might later if I decide to help out with a LAN party, or in the future where I might need more than 254 IP's. |
|
 cdruGo ColtsPremium,MVM
join:2003-05-14
Fort Wayne, IN
kudos:5
 ·Frontier FiOS
| reply to Cjaiceman
said by Cjaiceman:Its not because the Linksys is failing or anything like that, I just want to try some open source projects on an older computer to see if I can pick up some performance on the internet. You likely will not pick up any noticable performance by running monowall or smoothwall vs one of the 3rd party firmwares available for the WRT routers. I'm not trying to discourage you from using one of the router/firewall packages, there is something to be learned by tinkering around, it's just that unless you have some very complex QoS or SPI firewall rules, doing everything that you want to do should be easily handled by the WRT.
--
Quis custodiet custodes ipsos? |
|
DaSneaky1Done wall to block them allPremium,MVM
join:2001-03-29
The Lou Reviews:
·Charter
| reply to Cjaiceman
If you want to use more than one subnet, you can easily throw another NIC into the boxen. If you really want to get complex, you can even get a managed switch and create vlan segmentation.
If you simply want a larger range of IP addresses, you can assign your LAN to a /23 subnet, which will give you ~500 usable IP's.
--
:: my trivial ramblings :: |
|
cdruGo ColtsPremium,MVM
join:2003-05-14
Fort Wayne, IN
kudos:5 Reviews:
·Frontier FiOS
| reply to Cjaiceman
said by Cjaiceman:The only problem I have with that is when I try to setup more than 1 IP range (ex: 192.168.0.1 through 192.168.1.254) no computers will connect. I'm sure its something to do with the subnet, but I just can't figure it out. I'm setting the subnet to 24 and 255.255.255.0. Its not that I need it now, but I might later if I decide to help out with a LAN party, or in the future where I might need more than 254 IP's. The subnet (the /24 or 255.255.255.0 tells the computers which addresses are in the local network. With that particular subnet, only the last octet determins the host address within the network. The first 3 octets determine the network address. So 192.168.0 is one network, and 192.168.1 is the other network. My guess is a PC on one network was not having problems talking to another PC within the same network, but would have problems talking to a PC in the other network.
As DaSneaky1D mentioned, switching from a /24 subnet to a /23 subnet will resolve your issues. The problem with that though is that most consumer level equipment will only support a /24 network at most.
--
Quis custodiet custodes ipsos? |
|
|
|
| reply to Cjaiceman
m0n0wall or pfSense |
|
| Now that's a good question. I was using IPCOP with 4 NICs on it and worked just flawlessly for me. Only thing I had to modify is that I had to install and configure Zerina VPN server and it worked just fine with OpenVPN clients. However, I just wanted to give M0n0wall a shot but then when I came to know M0n0wall and pfsense is almost the same thing I went with Pfsense but the machine rebooted itself couple a days ago after 2 weeks of uptime as it anything like that ever happened to me when I had IPCop as it ran for months after months without any reboot at all. Oh, and I used the same machine.
Spec. is following for the machine:
CPU: 400 mhz
HDD: 4GB
RAM: 128 mb
--
.:: Sunny ::. |
|
 rpeAMP
join:2000-12-02
San Antonio, TX | Have you tried the latest version of pfSense? Their first stable release occurred just here recently. |
|
