Hardware

Hi, I'm interested in building a cheap gigabit firewall. I'm looking at using something like an old Intel P3 server system with Intel PCI-X gigabit NICs. Would m0n0 support this type of hardware?

I was also wondering if m0n0 supports 4 or more interfaces? I'm interested in having 4 or 5 subnets and using m0n0 as a firewall to control access from one to another. Basically, I need a LAN, DMZ and a couple of separate lab networks and want to control access between them and to the Internet.

Thanks,
Brian

The only issue you might have is the compatibility of the gigabit NIC's.

Thanks, I will probably use the Intel Pro/1000 dual NIC cards, anyone used those?

So, the multiple subnets will all work fine? Can you have multiple public IP addresses on the WAN side that you map to various servers in a DMZ.

I have seen a few 16 port m0n0walls.  If you use vlan, it can go even higher.  You can have a large number of additional IPs on the wan and map them using server based NAT or 1-1 NAT.  You can also bridge one interface to the WAN for "outside" servers.

Remember, however, that a p3 server does not have a fast bus, so performance will be limited.  Stick to Intel or 3com 100baseT cards for the best performance.  (Others will offload work to the small CPU)

Thanks for the info, I'm looking forward to trying it out. I'll be using this on a P3 board with PCI-X slots so it should be able to handle the throughput of the gigabit NICs.