Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Currently we have shorewall running as our firewall, but we're switching over our network to something lighter. We were thinking of using a Linksys E2000 and installing DD-WRT. We have a cable internet connection with three assigned IPs. As part of our internal network, we've got three servers that go into a DMZ. Currently all machines on the 10.1.3.X subnet are in the DMZ. All machines on the 10.1.4.X subnet are the local infrastructure like domain controllers, internal development, database servers.

Various ports are opened on machines across the network to the outside world. A web server here, a mail server there.

Is this too much for WRT to handle? Any pointers on how to do it? Is the selection of routers appropriate?

EDIT: I should add that it would be best if one of the ports was the DMZ. Is that possible?

share|improve this question
    
How many machines on the 10.1.4.x network, and how many of them access the DMZ? –  gravyface Oct 25 '10 at 13:38
    
There's about 20 machines in the 10.1.4.X network and 3 or 4 in the DMZ. –  jeffkolez Oct 25 '10 at 14:17

2 Answers 2

up vote 7 down vote accepted

DD-WRT is nice for routing, but if your replacing a firewall, I would lean towards pfSense or Endian as a firewall solution instead of a router with firewall capabilities.

share|improve this answer
    
I'm starting to agree. When WRT was suggested, I thought the network was a lot less complex than it turned out to be. –  jeffkolez Oct 25 '10 at 14:18
1  
Had very good experience with Endian. –  Taras Chuhay Oct 26 '10 at 15:23

DD-WRT isn't capable of allocating a physical port on your hardware like most firewalls can, however it can certainly handle DMZ / NAT type tasks which are the primary function of most firewalls.

http://www.bizsystems.net/howto/DD-WRT_DMZ-with-static-public-subnet.html

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.