This weekend I decided to build myself a new firewall. The obvious question is, “why would you need a firewall at all?”. I released about a year ago that I was going to need something a little better than a consumer class router to handle my home networking needs. It’s not that I do anything all that fancy or need more functionality, the little router was not able to handle all the connections I was creating via torrents. It would last for maybe a couple of days then services would slowly die. The dhcp server might crash, the wireless might go down, then blamo it would hard lock. I’d have to reset the power and everything would be fine for a couple of days again..rinse repeat. I decided to build a smoothwall on free hardware just to see if it’s something I would use. Fast forward a year and as it turns out the smoothwall is something that was kind of handy to have. The machine I have it on though it starting to show it’s age in a bad way. It may or may not boot up completely after a power outage. One of the NIC’s is starting to get finicky about the connection..the hard drive sounds like it’s on it’s last legs…it’s time for a new one. On top of all that, it would be nice to have something a little bit faster. I decided to repurpose my old desktop for the new firewall box. This machine has a 2.2ghz athlon with 2gig of RAM and an 80ish gig SATA hd. That should be enough horse power to run a firewall pretty smoothly. I ordered a couple more NICs so I could configure things the way I wanted…and I was off and running.
There isn’t much to say about the install, smoothwall goes on really easy. The only “tricky” part about it is knowing what NIC it’s talking about when it asks you what to use for the various interfaces. I configured it and rebooted..good to go. The difference between this machine and the old one is nothing short of incredible. It responds so much faster, it runs quieter…it’s just an all around better box. I mentioned in the last paragraph that I ordered 3 NICs. I set one up as the “RED” (external) interface, one as the “GREEN” (internal) interface, and the last as the “ORANGE” (DMZ) interface. What having the orange interface allows me to do is put a machine on that NIC and keep it segregated from my internal network as well as have it unaffected by the various mods I put on the firewall (content filter, adzapper…etc). I’m going to connect the wife’s work machine into this NIC. It isn’t going to increase her speed or anything like that, but it will allow me to say that any problems she is having are not caused by the firewall. Of course that won’t stop her from asking me about every issue as soon as it comes up…
I dig on being able to create as many connections as possible and this firewall still handling them without a hiccup…and I take for granted all the ad’s the adzapper actually does take care of for me. The content filter isn’t something I’d really need per se…but it keeps the wife happy that the kid isn’t seeing something we don’t want her too. The 2nd install of smoothwall went much better than the first time I did it…I can’t imagine what the difference might be….