Is it possible to get very cheap appliance in UK / Europe
-
I'm very happy with the refurbished HP 7900, small form factor system I picked up for $150. It is small, nearly silent and lots of nice features. I added a small SSD and a couple PCIe Intel NIC cards and it is running fine.
There are a lot of refurbished or even cheaper just "lease return" systems out there that make a nice base for a firewall or small server box.
-
That post regarding the Watchguard boxes is quite old now. There is a workaround/fix for the 4 msk interfaces in the X-e boxes, such as the one I linked to.
For what can be made to work and what can't, see: http://doc.pfsense.org/index.php/PfSense_on_Watchguard_Firebox#Supported_Fireboxes
I am still in the process of finishing that wiki page though. ;) I hope to have it mostly finished in the next few days, time permitting. It has enough info to give you an idea of what is required to get going.
Where abouts in the UK are you? I have an excess of boxes!
Steve
-
I am in the South East - just West of London. If you have any spare boxes that are suitable - would be very happy to get one from you - PM me details.
Great job on the WIKI - I wish I had found that earlier, would have saved some searching.
Nigel
-
Very compact
Used laptop with Intel Ethernet ControllerYou can add a Ethernet expresscard to gain additional Ethernet controller
or
level 2 switch so you can run vlans (Only one Ethernet controller required)
Note:
Using a laptop with Two WAN's a level 2 switch would be required. -
Have a look for multi-nic thin clients - I bought a BosaNova (now 10Zig) thin client for £20 last week - it's a Geode LX800 board (like an ALIX) - only 1 NIC, but I wanted it for a part-time VPN endpoint so it only needs 1.
Anything on the AMD Geode (LX or NX, GX would not have any guts @300MHz), or anything that currently run XP embedded should do the job - plenty under £30 on ebay. Multi NIC is the stumbler, though…
-
PS. That box you found in the US; the hardware is a NeoWare thin client.
A number of companies turned them into network appliances, including Equiinet - the NetPilot
http://www.ebay.co.uk/itm/EQUIINET-NETPILOT-PLUS-Internet-Security-/290869226011
-
another option if you can find one on ebay is:
Symantec SGS 1660 (probably best to search for symantec 1660)
6 Intel Gigabit ethernet
Via Cpu
Builtin Hardware Crypto
30g hard drive
Quiet machine in a 1u chassispower draw on the 120v version 37 watts running..
ive been running one in my HOME enviroment for 3 years.its attached to a 60/20 connection and see Maybe 10% cpu utilization
running 2.1-Beta1 -
PS. That box you found in the US; the hardware is a NeoWare thin client.
A number of companies turned them into network appliances, including Equiinet - the NetPilot
http://www.ebay.co.uk/itm/EQUIINET-NETPILOT-PLUS-Internet-Security-/290869226011
This is what I used to use for pfsense.
Combine the CA10, with a pci reiser, pci nic & a IDE DOM card and you have a decent firewall.
You can find my old post here: http://forum.pfsense.org/index.php/topic,40502.msg209156.html#msg209156
-
How did you flash the DOM with nanobsd?
-
How did you flash the DOM with nanobsd?
DOMs usually have flash with many more write cycles than consumer grade flash intended for cameras, phones etc. Therefore you can run the full version of pfSense on them. I have run my home pfSense from the same 1GB DOM for over 4 years.
If you want to run NanoBSD why pay extra for a DOM when a cheap CF card would do?
But if you really want to run the nanoBSD version off a DOM then the flash procedure would be essentially the same as for a CF except you would need to connect the DOM to the motherboard on the appropriate socket (SATA or IDE) for the DOM and take care that you specify the destination device correctly. The exact details will depend a bit on what equipment you have available for flashing the DOM.
