LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 09-29-2005, 01:44 AM   #1
alaskazimm
Member
 
Registered: Mar 2004
Location: Watching it snow in bush Alaska
Distribution: *ubuntu, Smoothwall, WinXP Pro
Posts: 126

Rep: Reputation: 15
Shorewall & Smoothwall both - waste of cpu cycles?


I've got a Gentoo box running with Shorewall just fine, but I recently came across an old PIII that I decided to make into a dedicated firewall. I installed Smoothwall and now have that running. Is there any benefit to having Shorewall running on the green side? If there isn't then I will disable it to shut down a few processes.

Thanks
 
Old 09-29-2005, 08:24 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,543
Blog Entries: 54

Rep: Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924
Is there any benefit to having Shorewall running on the green side?
Pro: Multi-level protection. The main firewall can be seen as a single point of failure in case of to vulnerabilities, misconfiguration, etc, etc. Having a firewall per host allows for more fine-grained control, is more flexible just in case you want to test things out. Can also help curb the effects of LAN misuse/abuse (at least on mine).
Con: having to manage another set of FW rules. Well. That's a *huge* task, innit?..

If there isn't then I will disable it to shut down a few processes.
According to the site, Shorewall is just an iptables configuration utility. After the rules are set up Shorewall doesn't "run". If your boxen are capable and you're not DOSsing your own LAN you don't really waste CPU cycles.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
smoothwall of shorewall SlipAway172 Linux - Software 1 01-21-2005 07:22 PM
Non executable stack with Linux -- && 64bit CPU needed? lelolas Linux - Security 5 07-25-2004 10:25 PM
Mandrake 10 & Shorewall 2 hlozo Mandriva 3 05-27-2004 02:40 PM
Problem with Shorewall Firewall & IPTables Led*Zep Linux - Networking 1 03-15-2003 10:49 PM
Smoothwall & NIC's Satans Cyber Ki Linux - Networking 4 01-12-2003 04:20 PM


All times are GMT -5. The time now is 11:20 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration