@sap68: 1 + 2: what it's the goal to proxy all traffic outbound? The spambot or trojan can't communicate directly through internet ad will be blocked? The goal is to control all the outbound connections, ideally by not allowing any direct outbound traffic.  By forcing all outbound traffic through a proxy you can manage it better, and log it all.  If you install an email server and configure it to scan for (and block) spam and malware then that should stop any spambots. By forcing all outbound email through a single, managed, email server and all other outbound traffic through a proxy (or opening a single port for for a single computer where the program can't work through a proxy) you can log everything.  Once you've got those logs you have to go through them to find the problems and deal with them.  It'll take time and effort to do that.

Assign the IPs statically (either directly or via DHCP static settings) and then apply your policy routing rules based on the source IP, not port/protocol.

Meh, I don't get certs for resumes, I get them (at least Cisco certs) because they're a great way to fill in the blanks between things that you've taught yourself and things you just picked up by working with the product.  I think having online tests that one could test himself against so he knows what he doesn't know would be great.  Even if you don't get a piece of paper at the end.

Now I feel dumb, I thought I needed HTTP_AUTH somewhere.  Thank you, jimp.

Yes in 1.2.3 the boot time it takes is normal. In 2.0 that is much, much improved.

Thanks GruensFroeschli. Your suggestion worked. :)

I think I had problems with my install.  I have it working on my ubuntu box with no problems.  Thanks though

Thank you.  I was unaware that I would need more than one item.  I will check into those!

Well for the money "FREE" the scheduling rocks, makes a kick-ass SOHO when compared to the average store bought box. However I did use my old dlink 4500 as a wireless AP, it hooked right into the switch and works like a charm  :)

I am using Nagios

There isn't a lot of information to go on there. Integrate in what way? What are you trying to accomplish?

+1 to cmb's comments.  Give it a while and it may be worth looking at, but currently there's nothing it can do that Snort hasn't done for some time.  Given a choice between a well tested platform, and a new one, for any security critical one I'd go with the well tested one…

@valnar: Will there be PPPoA support in 2.0? No plans for that. Not sure if mpd can handle that or how much work it would be.

I've known (never met, but conversed with many times) Manual for something like 6 years, before this project existed (I was originally, and still am, a m0n0wall developer too). He doesn't have interest in doing a lot of work on m0n0wall or joining another dev team. His focus has moved to a "real job", m0n0wall was most active and initially written when he was in college. Though a few of our developers now do this as their "real job", thanks to the contributions of many companies. Maybe if that increases further, we'll offer him a job.  ;D

Merging this to one of the already existing topics.