|
View: 10638|Reply: 45
|
Macam Mana Nak Buat Firewall Guna PC/Laptop Terpakai
[Copy link]
|
|
|
boleh meha tahu apa yang diperlukan untuk buat firewall tu?? maksud meha spec pc dan OSnya?
software untuk buat firewall tu????
macam best je |
|
|
|
|
|
|
|
|
|
|
|
Check out the link I put in there.... I guna firewall ni kat rumah, jadik firewall/router untuk Streamyx. Memang best pun, boleh dapat sama cam top-of-the-line hardware firewall plus boleh tune as you pleased... Ini cuma "express version" je, tapi boleh tambah functions kalau kena dgn extensions dia...
Kalau nak buat firewall tu run banyak menda, cuma tambah RAM je lah. Spec PC tu tak penting sangat, kat rumah ni saya pakai Pentium II je, 152 SDRAM; running standard settings + antivirus untuk POP3 & few others.
So, saya punya ada 2 NIC; satu untuk ADSL modem & satu lagi masuk switch. Cuma CPU je yg nak guna, tahukan "head-less server"? Monitor, keyboard & mouse semua takyah, semua config etc boleh access guna web browser, so boleh le letak mana2 yg nak....
Yg saya cakap "hardware firewall" tu sebab, firewall ni bukan software.... The OS itself is the firewall, guna customised Linux/GNU distro. So, takde exploit yg boleh guna kalau guna software-firewall. Saya pernah guna dalam office settings; Pentium II serving 30+ clients & tak pernah reboot sampai 6 tahun & counting.... 
The best thing is the setup is a no-brainer, put in the CD & reboot; follow some routine installation & basic setup & you're on. Just be sure that the PC is reserved for the firewall only as the setup will wipe the present installation HDD blank to install it on....
Oh yeah... lupa nak letak yg saya guna throttling untuk optimise bandwidth gak.... Org lain sibuk Streamyx slow, tapi saya boleh dapat decent speed thru this...
[ Last edited by Cretin.Penguin at 19-2-2008 06:43 PM ] |
|
|
|
|
|
|
|
|
|
|
|
Reply #4 Cretin.Penguin's post
|
recycle tuh brg yg dah takleh pakai pon die amik ke? bagi pree ke? or dpt duit gak? |
|
|
|
|
|
|
|
|
|
|
|
Reply #7 mehacomp_91's post
pop3 tu macam popcorn . . .  |
|
|
|
|
|
|
|
|
|
|
|
Reply #9 bzzts's post
ooo benda yang ada jual kat pasar malam sebungkus singgit tu ke
tak sangka popcorn tu pun kena ada antivirus |
|
|
|
|
|
|
|
|
|
|
|
Reply #10 mehacomp_91's post
http://en.wikipedia.org/wiki/Post_Office_Protocol
In computing, local e-mail clients use the Post Office Protocol version 3 (POP3), an application-layer Internet standard protocol, to retrieve e-mail from a remote server over a TCP/IP connection. Many subscribers to individual Internet service provider e-mail accounts access their e-mail with client software that uses POP3.
http://searchexchange.techtarget ... 3_gci212805,00.html
- POP3 (Post Office Protocol 3) is the most recent version of a standard protocol for receiving e-mail. POP3 is a client/server protocol in which e-mail is received and held for you by your Internet server. Periodically, you (or your client e-mail receiver) check your mail-box on the server and download any mail, probably using POP3. This standard protocol is built into most popular e-mail products, such as Eudora and Outlook Express. It's also built into the Netscape and Microsoft Internet Explorer browsers. |
|
|
|
|
|
|
|
|
|
|
|
Reply #11 bzzts's post
Oooo paham |
|
|
|
|
|
|
|
|
|
|
|
Reply #7 mehacomp_91's post
Saya pun bukannya Linux/GNU guru pun.... Tapi boleh le kalau setakat nak buat system controller untuk fully automated nuclear warhead...
Anyway, IPCop ni dah fully configured-OS.... Download, burn jadik CD, reboot & install je; itupun installation senang je, cuma ikut je... Masa install tu kena le guna monitor, keyboard & mouse; boleh gak kalau nak buat network installation tapi kena tau le...
Lepas install tu, dah boleh cabut semua & acesss le pakai web browser.... Dah takyah nak risau pasal firewall tu dah, ramai kat office yg guna tu lupa yg firewall tu ada kat situ. Boss dia datang tanya "Ni apa menda ni?" Semua tercengang je..... BTW, nak guna kat rumah pun boleh.... Thanks bzzts for covering me on the POP3 tu, tak sempat nak online malam semalam....
Ni hah dia punya screenshot settings dia dari browser:
 |
Rate
-
1
View Rating Log
-
|
|
|
|
|
|
|
|
|
|
|
Reply #14 Cretin.Penguin's post
apa kelebihan benda ni berbanding firewall yang diinstall kat windows sebagai contoh windows firewall?
apa yang membezakan benda ni dgn firewall biasa?
bagi begineer benda ni mudah atau sukar untuk dibuat?
[ Last edited by mehacomp_91 at 20-2-2008 10:30 AM ] |
|
|
|
|
|
|
|
|
|
|
|
Kelebihan dia banyak, tapi tak boleh banding dgn software firewall le... gap dia jauh sangat! IPCop & sejenisnya dah boleh consider sebagai "Hardware firewall", dah boleh banding dengan hi-grade firewall or industrial firewall. Beza dia, software firewall depends on other OS to run properly & reliably; hardware firewall runs on it's own so if the firewall is good, it'll live up to its reputation.
Contoh dia, kalau OS yg ada firewall tu dah kena compromised; dari dalam or dari network; the firewall is compromised & no good anymore. Hardware firewall "IS" the OS itself & it's hardened to the core & to compromised the OS (ie firewall) will be render the firewall useless as all the bells & whistle will be blown! So, analogy dia sama dgn AntiVirus. Kalau OS dah ada virus, install antivirus pun dah tak guna dah. Most "good" virus will just "tell" the antivirus that it's not there & the virus will be invisible to the antivirus, hence the user.
Kelebihan?; selain dari yg aku terang kat atas?:
1. Boleh upgrade & tambah accessories as needed. Boleh beli yg off-shelf router/firewall, tapi susah nak upgrade walaupun most of them running Linux/GNU gak. Just tambah memory & install accessories kat internet; antivirus, Dans Guardian etc....
2. Linux/GNU - kalau rajin boleh check exploits or loopholes & patch as needed.
3. Tambah satu lagi "gadget" yg boleh jadik obsession... Takde apa2 pun nak belek gak; logfiles, updates, new things etc.
4. Banyak boleh belajar.... My fav anyway.
5. Boleh tukar jadik apa2 yg kau nak dari basic setup. Kira sama dgn point#2 kat atas; fileserver, DHCP, DMZ & other servers.... The sky's the limit...
6. Tambah satu wireless card & configure jadik RADIUS server, kalau teringin nak ada Hotspot sendiri le... So, bzzts & DewaGanazz: nak buat extension untuk project DIY wireless bagus ni....
Apa lagi laaa.... Banyak, just tak terfikir sekarang ni.... |
|
|
|
|
|
|
|
|
|
|
|
Jangan le dah berpeluh lak.... Senang je nak buat menda ni, nampak je cam seram. Homeuser memang takpe takde menda ni, tapi like I always said "If I can, why not?"
Anyway, installation dia cuma ikut instructions yg straight-forward je; pastu masuk le menda2 yg biasa masukkan masa configure off-the-shelf router. Lagipun, zaman sekarang yg penuh dgn spyware, virus etc; lagi baik pakai firewall camni. Kalau nak meletup pun tak kacau PC yg penting, PC firewall yg buruk tu je...
Rasanya, nanti kalau tak busy sangat nak buat thread guide untuk smtg macam ni; rasanya takde lagi kot? |
|
|
|
|
|
|
|
|
|
|
|
|
best info ni...bila ada confiden..teringin gak nak cuba... |
|
|
|
|
|
|
|
|
|
|
|
:eek: :eek: :eek: :eek: :eek:
Bila meha buat thread ni |
|
|
|
|
|
|
|
|
|
|
|
Reply #16 mehacomp_91's post
|
|
|
|
|
|
|
|
|
|
|
Lor.... Patutle I tak ingat pernah post kat sini, tetiba post saya dah ada kat 2nd tu.... Tajuk dia pun macam tak pernah nampak jeee.... Ingat kau punya keje ni meha, anyway, kalau ada permintaan saya boleh le tolong lebih-kurang. Banyak gak guna menda ni, esp sekarang ni org main buang je computer yg lama2 tu...
Linux/GNU tak pakai banyak resources & very secure as by default all ports are closed until being open the system admin. Selain tu, maybe you all nak check out distros yg "melahirkan" IPCop ni: www.smoothwall.org
Smoothwall ni dibuat oleh team yg sama dgn beberapa members team tu yg nak buat apa mereka nak tapi tak boleh buat kat Smoothwall sebab Smoothwall tu kinda part-business entity. |
|
|
|
|
|
|
|
|
|
|
|
Looks like my hands are tied, dah kena "paksa" buat tutorial pasal ni dgn Mod ni..
Tapi camne nak buat aa? Kalau aku start buat kat sini, nanti tak nampak lak sebab dengan pics etc dah sampai next page. Anyway, Mod tolong advice? Maybe aku boleh buat dulu then Mod split it & put on top proper? |
|
|
|
|
|
|
|
|
|
|
|
maaf le... tutorial tu dah ada ke belum  |
|
|
|
|
|
|
|
|
|
| |
|
Post time 19-2-2008 05:56 PM
变色卡
Author
