[vishnu]

Also it is rare to find an ISP that allows one to use a static IP address.

That's true, but I have a cron job on my firewall such that if my ISP ever does change my IP address, the cron job will update my nameserver with the new address.

[jwhat]

The Cisco 3600 series were last sold 20 years ago, and have been unsupported for 15 years. They apparently use up to 140W of power. I'm sure it was a fine choice in it's day, but just because OP wanted a firewall for his IRIX system(s) does not mean the firewall has to be of similar vintage as the IRIX system...

Hi Jan-Jaap,

shameless plug on my blog post on migrating old IOS configuration from 2901 to 4331: https://just.graphica.com.au/tips/cisco-...migration/

The reason I changed routers were due to:
- 2901 being EOL and
- Wanting to have 1GbE for internet facing interface

I believe same approach would need to be applied for migration of 36XX / 38xx series routers.

4331 is also heading EOL but based on review of known vulnerabilities, looks ok for most (non IP-MPLS and non "Jumbo" packet based configurations) uses and security updates continue to 2028.

For those interested if you quote the right CERT bulletin details you can get CISCO to provide you with new IOS-XE release (without need for support contract), but it takes some considerable persistence... ;-) .

Cheers from Oz,


jwhat/John

[gmcenroe]

My new plan for my firewall: I picked up a Dell Optiplex 9020 on ebay for $79 ($13 FedEx shipping). I found a 4 port network adapter card that works with PFSense. I will install PFSense and use it as a dedicated firewall. Probably overkill on the processer but it was cheap. For wifi I will use my current router as a wireless access point.

[s0ke]

My new plan for my firewall: I picked up a Dell Optiplex 9020 on ebay for $79 ($13 FedEx shipping). I found a 4 port network adapter card that works with PFSense. I will install PFSense and use it as a dedicated firewall. Probably overkill on the processer but it was cheap. For wifi I will use my current router as a wireless access point.

I have a Soekris net6501 with PFSense laying around somewhere that served as a firewall for several years. I've since upgraded to a small form factor pc with Sophos XG and haven't looked back. It's a fine product.