M0N0WALL

Un routeur Linux sous FreeBSD 4.x avec un interface par le web. Le produit est vraiment tres bien reussi.
J’ai fais l’installation pour remplace mon ancien routeur afin de voir les performances :

au menu :

Status

At this time, m0n0wall can be used as-is with the net45xx embedded PCs from Soekris Engineering (www.soekris.com) or on any standard PC with a BIOS that supports booting from CD-ROM (El Torito standard).
m0n0wall already provides many of the features of expensive commercial firewalls, including:

* web interface
* serial console interface for recovery
o set LAN IP address
o reset password
o restore factory defaults
o reboot system
* wireless support (access point with PRISM-II/2.5 cards, BSS/IBSS with other cards including Cisco)
* stateful packet filtering
* NAT/PAT (including 1:1)
* DHCP client, PPPoE and PPTP support on the WAN interface
* IPsec VPN tunnels (IKE; with support for hardware crypto cards)
* PPTP VPN (with RADIUS server support)
* static routes
* DHCP server
* caching DNS forwarder
* DynDNS client
* traffic shaper
* firmware upgrade over FTP
* configuration backup/restore

A venir

* support DHCP service on routed wireless interfaces
* use obtained DNS servers when DHCP on WAN is enabled
* “assign network ports” in webGUI
* diagnostic functions (ping/traceroute/tcpdump) in console menu
* console menu accessible via Telnet/SSH
* remote manageability (SSL?)
* allow IPsec tunnels to optional interfaces (not only LAN)
* documentation
* more status pages (IPsec, PPTP sessions, CPU load, firewall stats, connection uptime, …)
* allow firewall/NAT/shaper rules to be temporarily disabled
* support “block” rules (and make rule order controllable) (good idea?)
* quick-setup wizard
* make the error LED mean something (WAN interface status etc.)
* connect/disconnect button for PPPoE/PPTP WAN
* SNMP service
* support secondary networks on WAN interface (possibly with load balancing)
* time/day of week based firewall rules
* set system date/time in webGUI
* dialup backup link (via serial port)
* second webGUI user with read-only access
* firewall: allow return-RST/ICMP unreachable on block
* firmware upgrade via console (XMODEM) (?)
* traffic grapher
* intrusion detection

Site de M0N0WALL

Ce qui est interessant aussi est qu’il est possible de faire l’installation sur les equipements net45xx.

Vraiment formidable alors a vous tous bonne decouverte!