I like this idea but I'm starting to think that unless a freedombox comes out sooner than later I may have to go the pfsense route.<br><br><div class="gmail_quote">On Sun, Aug 21, 2011 at 2:18 AM, unsolicited <span dir="ltr"><<a href="mailto:unsolicited@swiz.ca">unsolicited@swiz.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Actually, and I forget for sure ... OpenWRT may be able to call out to other facilities/storage for pass/fail. Much like radius. I believe Richard gave up on nfs, but had success with samba. I don't recall seeing a correlation between file storage for lists, and actual increase in iptable memory footprint. Or horsepower.<br>
<br>
You could try it, and if it immediately kills OpenWRT performance, turn it off. Or run Openwrt on a stick on a box, to try. All I'm thinking of there (as opposed to long term pfsense strategy) is it should be close to pick up / put down the OpenWRT config files.<br>
<br>
Even just running the level1 & bogon lists may have some benefit, instead of everything including the kitchen sink.<br>
<br>
Colin K wrote, On 08/21/2011 2:00 AM:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
I provide wireless / ethernet network access to several people who do who<br>
knows what on my connection I want to plug a filter between my internet and<br>
all of us I don't care necessarily what they do thats their business I just<br>
don't want to get attention from it. So something like this will be highly<br>
anticipated. I was actually looking at the memory footprint of Peerblock on<br>
one of my machines... yeah its pretty painful for memory. Its looking more<br>
and more like its going to be a pfsense box for me in the mean time.<br>
<br>
On Sat, Aug 20, 2011 at 7:27 PM, unsolicited <<a href="mailto:unsolicited@swiz.ca" target="_blank">unsolicited@swiz.ca</a>> wrote:<br>
<br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
Colin K wrote, On 08/20/2011 6:55 PM:<br>
<br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
Archive.org to the rescure?<br>
Link<<a href="http://web.archive.org/**web/20100222030154/http://www.**" target="_blank">http://web.archive.org/**<u></u>web/20100222030154/http://www.<u></u>**</a><br>
</div><a href="http://bluetack.co.uk/forums/index.**php" target="_blank">bluetack.co.uk/forums/index.**<u></u>php</a><<a href="http://web.archive.org/web/20100222030154/http://www.bluetack.co.uk/forums/index.php" target="_blank">http://web.archive.org/<u></u>web/20100222030154/http://www.<u></u>bluetack.co.uk/forums/index.<u></u>php</a>><div>
<div></div><div class="h5"><br>
from JULY 15, 2009 Snapshot<br>
<br>
Software packages such as PeerGuardian, PeerBlock(forked from PG), Moblock<br>
(linux variant) these all use the bluetack lists. Afaik unless they pull<br>
from here <a href="http://ipblocklist.com/" target="_blank">http://ipblocklist.com/</a> im not sure but either way they block<br>
crap<br>
tonnes of ip's. Wish I could get a router to filter this stuff right now<br>
not later.<br>
<br>
</div></div></blockquote><div><div></div><div class="h5">
You can. You can do it with the linux router you have right now. (You just<br>
probably don't want to. Below.)<br>
<br>
Have used PeerGuardian / PeerBlock, for years. Happily so. Installed iplist<br>
/ ipblock in the last couple of days. Seems to be working well. (One<br>
buggette, one user interface issue. One issue left uninvestigated thus far.)<br>
<br>
All pull from bluetack, which, if I read correctly, is more of a central<br>
point of retrieval, than entirely a source of the lists. I believe they pull<br>
their lists from iplists, or vice versa, I forget which / get confused.<br>
Upshot - either gets you the other and to the same place.<br>
<br>
The iplist forum (or moblock adjacent references there or somewhere) note<br>
router attempts. The problem being the 16MB of memory consumed by the lists<br>
- with limited router memory. Although intuitive, today, didn't see any<br>
references to people with usb drives connected to them (the router) trying.<br>
<br>
You can get at least part of where you're talking in the mean time, though.<br>
Be it running a web proxy and having it suck in the lists, downloading a<br>
hosts file (dynamic update mechanism undiscovered to date) or loading a<br>
static 'high-level' list into openwrt's iptables.<br>
<br>
Or running iplist everywhere, all sucking up the same lists.<br>
<br>
Not point of traversal, unless your linux box is your gateway, but the<br>
limited hardware power of typical OpenWRT devices seems insurmountable. I'll<br>
guess pfsense will take advantage of the lists, if you have one in place.<br>
<br>
<br>
______________________________<u></u>**_________________<br>
kwlug-disc mailing list<br>
<a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
</div></div><a href="http://kwlug.org/mailman/**listinfo/kwlug-disc_kwlug.org" target="_blank">http://kwlug.org/mailman/**<u></u>listinfo/kwlug-disc_kwlug.org</a><<a href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" target="_blank"><u></u>http://kwlug.org/mailman/<u></u>listinfo/kwlug-disc_kwlug.org</a>><br>
<br>
</blockquote>
<br>
<br>
------------------------------<u></u>------------------------------<u></u>------------<div class="im"><br>
<br>
______________________________<u></u>_________________<br>
kwlug-disc mailing list<br>
<a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
<a href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" target="_blank">http://kwlug.org/mailman/<u></u>listinfo/kwlug-disc_kwlug.org</a><br>
</div></blockquote><div><div></div><div class="h5">
<br>
______________________________<u></u>_________________<br>
kwlug-disc mailing list<br>
<a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
<a href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" target="_blank">http://kwlug.org/mailman/<u></u>listinfo/kwlug-disc_kwlug.org</a><br>
</div></div></blockquote></div><br>