[fedora-arm] FW: Simple routing device advice (mildly OT)

[Peter Robinson]

On Tue, Jul 22, 2014 at 6:06 PM, Timothy Krantz
<tkrantz at stahurabrenner.com> wrote:
> Oops forgot to send to the list
>
>
>
> From: Timothy Krantz [mailto:tkrantz at stahurabrenner.com]
> Sent: Tuesday, July 22, 2014 10:03 AM
> To: 'Pete Travis'
> Subject: RE: [fedora-arm] Simple routing device advice (mildly OT)
>
>
>
> Hello Fedora ARM hackers,
>
> I'm shopping around for a device to provide basic routing and firewall
> functions.
>
> The goal is to provide remote access to an IP camera through satellite
> internet connection.  To keep the camera and link from getting buried or
> abused, I want to limit access to connections from a particular /25. If
> using a dynamic IP, the satellite modem uses NAT and does not offer firewall
> or port forwarding capability.  If using a static IP, a public IP is routed
> directly to the inside device, without a firewall.
>
> I'm thinking a small multipurpose ARM device would be a cost effective
> solution.  Any problems that can't be resolved via ssh will be dealt with by
> post or remote hands, so it must be fairly reliable, not require user
> intervention to survive power cycles, etc.  I'd like a dual Ethernet device,
> but a USB nic could do.  There will need to be a case or finished chassis of
> some sort, preferably one that could protect that second NIC from accidental
> disconnection or tampering.
>
> Is there anything on the market that fits the bill, or am I better off with
> some OpenWRT supported consumer router, or maybe something else?
>
> --Pete
>
>
>
> You might want to take a look at the Dreamplug or Mirabox from globalscale.
> They both have dual Ethernet and cases.  I use both for exactly the reasons
> you want.  I have run fedora on both but currently run slackware on both for
> reasons clear only to me.

The dreamplug is only ARMv5 so is unsupported. I have a mirabox and it
does work but it has a terrible uboot from the last decade so doesn't
support device tree OOTB so there's hacks needed to support booting
and it's not particularly pretty, not something I would recommend
particularly to deal with remote support.

Peter