[Gllug] High Availability firewall

[Dan Kolb]

On Fri, Mar 31, 2006 at 03:44:51PM +0100, Julian Somers wrote:
> Hi All,
> 
> I need a redundant firewall system that will failover in case of  
> hardware failure. A colleague recommends a couple of Cisco Pix 520s,  
> but in my opinion, we have better things to do with £5000.
[snip]
> Has anyone had experience with this? Is there an easier way to  
> achieve it than with linux-ha, for someone who has no experience  
> whatever in clustering?

Take a look at OpenBSD's pf and CARP - these should do what you want, and pf is
a hell of a lot nicer to deal with than iptables.

Dan
-- 
Mother is far too clever to understand anything she does not like.
		-- Arnold Bennett
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug