Re: [gentoo-server] rock solid firewall box

[Jonathan Romero]

<disclaimer>I am in my last few months of my bachelors degree in CS and
am averaging around 3 hours of sleep per night, and it's 2:30 am. 
Please forgive spelling and logical errors.  I wont be offended if
things are pointed out to be wrong in this post.
</disclaimer>

I use shorewall on a gentoo system running wolk-sources as my border
firewall.  It runs really nicely.  If you do decide you want to proxy
outgoing access from your users, squid runs VERY well for this.  

I've used squidguard before for content filtering as well and found it
very useful.  One other benifit of running a proxy is it's relatively
easy to do time based filtering, like blocking outgoing network access
from certian segments over the weekend.  In general i'm not a big fan of
leaving internet access on outside of business hours.  

I've heard good things about Dansgaurdian, but never tried it before. 
Oh and one more thing, i HIGHLY reccomend transparent proxying of port
80, simply for the sake of cutting down on support calls when some self
appointed techno-genius messes with their proxy settings.  Read the
squid and shorewall docs for info on how to do this.

-Jonathan S. Romero

On Thu, 2004-03-25 at 00:55, Andrew Gaffney wrote:
> I'm wanting to turn a Gentoo box into a solid firewall for a DSL connection. I was
> thinking about something that controls outgoing connections as well as incoming. Maybe a
> proxy server running on port 8080 and the firewall blocking all outgoing requests except
> through the proxy (for blocking virus network traffic). I was wondering if anybody had a
> similar setup.