Re: [cobalt-developers] OS-discussion

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

"E.B. Dreger" wrote:

> OpenBSD 3.0's "pf" is nice.  Building some firewall/VPN boxes
> based on it for clients, as well as one for us.  I'm waiting to
> deploy ECN until broken firewalls are beaten back, but one has
> that choice.  Note that it can also use its own ISN generation to
> help avoid spoofing attacks on machines with broken IP stacks.
> Niiiiice. :-)
> 
> If you want ipf and CBQ traffic shaping, FreeBSD with HZ=1000 and
> ALTQ works nicely.  AFAIK, OpenBSD and NetBSD don't allow one to
> change HZ.
> 
> NetBSD, which I've not yet played with, seems to be a favorite
> for R&D experiments.  Several good packages originate(d) there.

Do these BSD firewalls work without NATting?  NATting is NOT something
our clients like.  It's not something we like.  So can we firwall, yet
still maintain our public IP#s using these products?  If so, can you
direct me towards documentation or a how-to?

> I had an off-list discussion with someone from Sun Cobalt who
> said that developers vehemently objected to the thought of
> diverging from GNU/Linux on x86.  This surprised me, so I wanted
> to see if there were others who thought the same way I did, or if
> nobody else really gave a darn about anything beyond GNU/Linux on
> x86.
> 
> Looks like I was wrong.  Looks like "Sun developers" love
> G/L+x86.  They can have it... none for me, thanks.

The Sun developers you're talking to are most likely Cobalt developers. 
Of course they love their Linux; they were raised on it.  As to the
corporate culture?  That remains to be seen <smile>.

> [ Responding to Joerg Jan Muenter -- yes, I'm umlaut-challenged ]

You can cut and paste to get "Jörg"; that's what I do <smile>.  Besides,
he signs his posts "Jan" so my guess is that's what he likes to be
called <smile, again>.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484