Re: The Route(r) of All Evil
  By: Mindless Automaton to DOVE-Net.Unix_Discussion on Tue Jan 02 2007 19:23:00

 > I have run out of port forwards on my router and was thinking of setting
 > up a linux router and run synch from it also.
 > 
 > Is there any reason I should not do such a thing?

When building a Linux frewall/gateway, it's generally considered a good 
idea to build it as "lean" as possible.  Then you run your services on one 
or more machines *begind* the gateway, possibly on a DMZ-type subnet.  
You compile a minimalist kernel with only the specific modules you need, 
don't enable dynamic module support, don't include a C compiler, install 
as little "unnecessary" code as possible.  The idea is that the less there 
is on the FW/GW, the less chances for a compromise.

However, once you acknowledge the additional risk to your network and 
agree to accept it, there is no reason *not* to do exactly as you have 
said.  I'd suggest building the FW/GW machine first, making it as "lean" 
as you can.  Once it's running, THEN install SBBS and bring it online.


---
Playing: "The chain" by "Fleetwood Mac" from the
"Rumours" album
 þ Synchronet þ Linus is a regular at The ANJO BBS.  No, Linus Brathwaite!
--- SBBSecho 2.12-Win32