<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-AU link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>You can also get full routing and firewall functionality from routerOS with a free license. Paid license gets advanced features like more than 1 of each VPN session/s.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Cheers!<br><br>Mike.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> AusNOG [mailto:ausnog-bounces@lists.ausnog.net] <b>On Behalf Of </b>Alex Samad<br><b>Sent:</b> Wednesday, 11 January 2017 12:54 PM<br><b>To:</b> Cory Hawkless <Cory@hawkless.id.au><br><b>Cc:</b> ausnog@lists.ausnog.net<br><b>Subject:</b> Re: [AusNOG] Gateway Router firewall<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Can I suggest routerOS <o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><a href="http://forum.mikrotik.com/">http://forum.mikrotik.com/</a><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Roughly $50 for a virtual vm license..<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>A<o:p></o:p></p></div></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On 11 January 2017 at 12:45, Cory Hawkless <<a href="mailto:Cory@hawkless.id.au" target="_blank">Cory@hawkless.id.au</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm'><p class=MsoNormal>I've used the BGP functionality on pfSense via the OpenBGPD package and it works well. I found it a little quirky when you override the default configuration then go back and make changes in the 'Wizard' section, but getting CLI access to the box and opening the config files soon shows you exactly what's going on.<br><br><br>-----Original Message-----<br>From: AusNOG [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a>] On Behalf Of Glenn Hocking<br>Sent: Wednesday, 11 January 2017 9:59 AM<br>To: <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br>Subject: Re: [AusNOG] Gateway Router firewall<br><br>Thanks for all the responses regarding gateway router/firewall software. I investigated them all :-)<br><br>For my situation I am going to try out pfSense, it seems to have come a long way since I last tried it. It seems to do everything I need, plus the CARP redundancy looks great! My hand rolled perl scripts to achieve gateway device failover do cause me some anguish.<br><br>I currently use or have played with many of the packages listed but the following pfSense features URL does state that 'Packages: Some are in beta stage'. The primary package that I will need under pfSense is the OpenBGPD. I currently use Quagga bgpd.<br><br>Does anyone have any comments of current pfSense additional package use? such as what to use, what to steer clear from? Should I install only what is needed or its resilient and packages can be easily installed, played with and removed without issues even in a production environment. I do test obviously first, but test environments are never conclusive.<br><br><a href="https://doc.pfsense.org/index.php/Features_List" target="_blank">https://doc.pfsense.org/index.php/Features_List</a><br><br>The end result of this is to have reliable gateways that other engineers can also manage ad hoc and for me to be able to sleep peacefully at night. I'll post me results of this exercise if other wish.<br><br>Cheers<br><br>Glenn Hocking | Managing Director<br>Woosaw Pty Ltd | <a href="http://www.woosaw.com.au" target="_blank">www.woosaw.com.au</a><br>Sydney Office: <a href="tel:%2B612%208090%203441">+612 8090 3441</a> | Mobile: <a href="tel:0420%20942%20641">0420 942 641</a> PO Box 391 │ Pyrmont NSW 2009 | Australia<br><br>On 10/01/2017 11:55 AM, Glenn Hocking wrote:<br>> Hi All<br>><br>> For many years been using hand rolled router/firewall boxes for my<br>> hosting network gateways. Time for an upgrade but still want the<br>> flexibility of Linux based systems. Just wondering what others like in<br>> this area and recommend as assume there should be some good hardened preconfigured systems available now. Prefer open source Linux and free.<br>><br>> What I currently use is,<br>><br>> OS: Debian Linux<br>> BGP: quagga<br>> Firewall: iptables<br>> Load balancing and HA: ipvsadm + perl<br>> Monitoring: ipt_netflow + nfsen<br>><br>> Cheers<br>><br>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></div></div></body></html>