DSM-G600, DNS-3xx and NSA-220 Hack Forum
Unfortunately no one can be told what fun_plug is - you have to see it for yourself.
You are not logged in.
Announcement
IRC Channel #funplug on irc.freenode.org
#1 2008-11-29 12:25:30
- Stutz Jr
- Member
- Registered: 2008-09-20
- Posts: 9
Is NAT/SPI enough?
Or should I be considering more hardware on the network?
I think the above question is self explanatory for the people who can answer this question..
Offline
#3 2008-11-29 16:58:27
- fordem
- Member
- Registered: 2007-01-26
- Posts: 1938
Re: Is NAT/SPI enough?
It depends - on what you are trying to do - which you haven't bothered to detail.
In my opinion NAT/SPI leaves quite a bit to be desired, personally I want CBAC, but for the average consumer, I'd say it's more than adequate
Offline
#4 2008-11-30 02:01:46
- Stutz Jr
- Member
- Registered: 2008-09-20
- Posts: 9
Re: Is NAT/SPI enough?
I used to run a smoothwall back in the days when I wanted to retain my dialup (!) connection when windoze decided I needed to reboot for any random reason. But it was always a bit of a pain to have to boot up another PC just to dial the net or it was too noisy to leave on in my room overnight. I always thought a hardware firewall was a bit overkill for a home computer but that was before I had a network attached storage and other family computers on the same dsl modem/router. I think I can safely say that I won't be doing any ftp, vpn or web serving any time soon, and if i did I would surely get a new smoothwall up and running regardless.
Would be nice if the NAS could act as the firewall but then I guess it would need 2 network controllers?
Offline
#5 2008-11-30 03:01:00
- fordem
- Member
- Registered: 2007-01-26
- Posts: 1938
Re: Is NAT/SPI enough?
Stutz Jr wrote:
Would be nice if the NAS could act as the firewall but then I guess it would need 2 network controllers?
I believe you can buy firewall/routers with a USB port that allows an external USB drive to be connected - for example the D-Link DI-624S, the Linksys WRT350N and the Netgear WGT634U.
Offline
#6 2008-11-30 07:49:15
- Stutz Jr
- Member
- Registered: 2008-09-20
- Posts: 9
Re: Is NAT/SPI enough?
Hey thanks for the model suggestions and sorry the vague original post. I guess I didn't want to advertise a substandard firewall if that were the case, but in the end if I have a problem I need to know about it before I can fix it.
I'm not sure I understand your suggestion of units which allow external USB storage? I already have a NAS and I won't need any more capacity for some time. The only reason I suggested using the 323 itself was to ask if it were possible it would avoid the need for additional new hardware.
My NB5Plus4W modem / router can be operated in half bridge mode and allow a single pc to act as a software firewall (ie. smoothwall) so unless I bite the bullet and decide to replace the modem (and upgrade to gigabit ethernet) I doubt that I would be buying a new router either.
Offline
#7 2008-11-30 17:49:55
- fordem
- Member
- Registered: 2007-01-26
- Posts: 1938
Re: Is NAT/SPI enough?
@Stutz.
How you do what you do, is your choice - I bought my DNS-323 to use as a NAS and I use it only as a NAS - I know other folks want to, and try to, make it do everything under the sun, apparently the prime reason being reduced power consumption.
Since you considered (however briefly) using it as a firewall - a purpose for which it is not suited because of it's hardware design (you would need two network interfaces), I though you might be interested to know you could take the reverse approach - and have your firewall do double duty as a NAS.
Offline
#8 2008-12-01 11:10:34
- Stutz Jr
- Member
- Registered: 2008-09-20
- Posts: 9
Re: Is NAT/SPI enough?
Cheers fordem!
Thanks for the comments and perspective 
Offline