This is Xolo's journal, a record of his thousand mile journey through the world of Open Source.
Stateful Firewall/IDS/Filter/DDoS Mitigation #2
Posted 02-12-2008 at 08:22 AM by Xolo
This started out in 2006-07-25 12:23.
Last update was #1, on Tuesday Juli 25th 2006.
Today is Tuesday February 12th 2008.
Update #2
I haven't updated on this subject in a (too) long time.
The 'move' I mentioned in the original thread of my current workplace is currently 'said' to happen very early 2009 (say Q1, Q2 if more 'accidents' happen thanks to the builders they hired), according to this location's management.
According to my IT manager however it will happen at the end of 2008.
My personal project was shoved onto the back burner because the workload has increased since update #1, even though I have put some tasks initially given to me down, I have been given new more elaborate tasks.
Not helping either is the fact people seem to have become extremely lazy, and have started using me/my services as a conveniance store for passwords, mooching program discs and other assorted social wonders. It's very tempting to convert all their machines to Linux and letting them suffer the change from Windows! ;P
To make things worse, a SonicWall machine was purchased in 2007, along with a lengthy, and very expensive contract for external management and update subscriptions.
In other words, IT management managed to nail some budget, while nailing their balls to the table at the same time. We can't even log into the box ourselves to manage it. We have to call, and wait. Oh, and pay of course.
Anyway, a Fox may lose his or her hairs, but not their tricks.
All this time I kept my personal project in the back of my mind and have kept looking for resources to use.
I have come across Untangle - The Open Source Network Gateway, which basically provides the services I was intending to gather into a custom installation, although some of it's features are made available/are extended for a per-year per-group fee..
I'll have to give this one a spin on a spare box for some hands-on experience.
I'm still sorta bent on figuring out the 'ideal' packages for each job (IDS/IPS, Spam, Viruses, Hardening, the likes), I suppose mainly because now that I reread my own thread on the forum, I unconsciously ended up saying I would build something, even though I should have known I have so very little time to do intense things like that anymore.
Isn't there some Zen saying that when you say you don't have time, your life isn't going where it should?
Last update was #1, on Tuesday Juli 25th 2006.
Today is Tuesday February 12th 2008.
Update #2
I haven't updated on this subject in a (too) long time.
The 'move' I mentioned in the original thread of my current workplace is currently 'said' to happen very early 2009 (say Q1, Q2 if more 'accidents' happen thanks to the builders they hired), according to this location's management.
According to my IT manager however it will happen at the end of 2008.
My personal project was shoved onto the back burner because the workload has increased since update #1, even though I have put some tasks initially given to me down, I have been given new more elaborate tasks.
Not helping either is the fact people seem to have become extremely lazy, and have started using me/my services as a conveniance store for passwords, mooching program discs and other assorted social wonders. It's very tempting to convert all their machines to Linux and letting them suffer the change from Windows! ;P
To make things worse, a SonicWall machine was purchased in 2007, along with a lengthy, and very expensive contract for external management and update subscriptions.
In other words, IT management managed to nail some budget, while nailing their balls to the table at the same time. We can't even log into the box ourselves to manage it. We have to call, and wait. Oh, and pay of course.
Anyway, a Fox may lose his or her hairs, but not their tricks.
All this time I kept my personal project in the back of my mind and have kept looking for resources to use.
I have come across Untangle - The Open Source Network Gateway, which basically provides the services I was intending to gather into a custom installation, although some of it's features are made available/are extended for a per-year per-group fee..
I'll have to give this one a spin on a spare box for some hands-on experience.
I'm still sorta bent on figuring out the 'ideal' packages for each job (IDS/IPS, Spam, Viruses, Hardening, the likes), I suppose mainly because now that I reread my own thread on the forum, I unconsciously ended up saying I would build something, even though I should have known I have so very little time to do intense things like that anymore.
Isn't there some Zen saying that when you say you don't have time, your life isn't going where it should?
