SUMMARY: SS1 as Router/Firewall

From: Admin Staff (admin1@loomis.berkshire.net)
Date: Thu Nov 28 1996 - 09:00:58 CST


Many thanks to those who responded. I'd have to say I got a mix of
responses on this issue (my original question is posted below). Many
thought that the SS1 was unable to perform this task, many thought it
might be ok. Nonetheless, I'm going to give it a try. I'll start out with
just a stripped down version of SunOS 4.1.x and two interfaces, running a
kernel route table and no fancy software. Now, can anyone tell me who
makes an inexpensive sbus ethenet card that'll run on an ss1? :)

Thanks to the following for their replies:

Mike Jones <jonesmd@unifiedtech.com>
David Sinn <DavidS@corbis.com>
Bert N. Shure <bert@virtual.com>
Plesha, Thomas A. (NSLC Pacific) <TPlesha@seacosd.navy.mil>
Rich Kulawiec <rsk@itw.com>
Gary W. Cook <gcook@netcom.com>
Eduardo E. Silva" <esilva@netcom.com>

And thanks to "Herbert Wengatz <hwe@uebemc.siemens.de>" for telling me to
get lost :)

My original post follows.

-Jason

>
> I am interested in the ability to use a dual ethernet interface SS1 as an
> ethernet router/firewall. I am an ISP and I have a couple of cusomers
> attaching their lans to our ethernet. I can obtain SS1 headless units with
> 16 megs of ram relatively cheap.
>
> I have guaranteed these customers a minimum bandwidth of 128 kbps.
>
> If this is feasible, what would you recommend that I run for software on
> the box? The machine will be stripped down of "services" and will only
> listen for telnet connections.
>
> I was thinking of routed/gated for route management (atlthough it will
> only route across two subnets, forwarding unknown packets to our internet
> router).
>
> I was thinking of running TIS Firewall Kit for any special packet filters
> I need to accomplish.
>
> I also need a way to monitor the bandwidth used and perhaps limit it. If I
> can't limit it, I was thinking of billing the customer for bandwidth used
> in excess of 128 kbps. Suggestions?
>
> Any help would be appreciated.
>
> -Jason
>
> System Administrator, BerkshireNet Internet Solutions.
>
>
>
>



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:11:17 CDT