[nycbug-talk] soho firewall

[Jeff Quast]

nobody has yet recommended wrap http://www.pcengines.ch/wrap.htm

It cost me just under $200 for a WRAP.1C-1, 2 LAN with DC adapter,
alluminum casing, and 128MB CF card after S&H (to US). from
http://www.mini-box.com/

a 3-LAN version is only a few more dollars.

I found it more cost effective than soekris, probobly more suited for
you, as the cheaper costs is likely due to no 2.5" IDE adapter, and
only one serial port. Like the soekris, it has a 266Mhz Geode onboard.
It seems to be supported just as well as the soekris in BSD and
gnu/Linux.

I've seen threads on openbsd-misc and Soekris-tech that even adding a
PCI crypto card to the soekris does not significantly improve crypt
for vpn. Though it is supported (at least on openbsd), there is
something to say about the bus and cpu speed of the soekris and high
interrupts of the onboard NIC's being at fault. In which case a via
may be more suitable (though more expensive?)

Does anybody know if there such a thing as a cost effective miniPCI crypto card?

On 3/8/06, michael <lists at genoverly.net> wrote:
> I'm looking for a new firewall/network device.  While I like soekris, I
> want to look at other choices before I buy another one. Besides, I have
> read that for ipsec they may not have enough umph.
>
> While I could probably make one out of an empty cigarette carton or
> something, I'd like it be manufactured.  I don't have any old pc's
> around to convert either.
>
> I've read this
> http://shopping.hacom.net/catalog/product_info.php?cPath=22_34&products_id=85
> http://routerboard.com/rb500.html
> http://caseoutlet.com/shopexd.asp?id=208
> http://store.orbitmicro.com/commerce/ccc1168-network-appliances.htm
> http://usa.asus.com/products4.aspx?l1=1&l2=3&l3=0&model=85&modelmenu=1
>
> I'm looking for desktop, compact, quiet, but not too pricey.  While I
> generally prefer via, I may have to look at P4 celeron mini-itx based.
> I'd prefer cf over hard drive. I have a dual nic so, I'll need a pci
> slot.. unless three nics come onboard.  One serial is required.
>
> Any suggestions?
>
> --
>
> Michael
>
> _______________________________________________
> % NYC*BUG talk mailing list
> http://lists.nycbug.org/mailman/listinfo/talk
> %Be sure to check out our Jobs and NYCBUG-announce lists
> %We meet the first Wednesday of the month
>