[fedora-arm] FW: Simple routing device advice (mildly OT)

[Timothy Krantz]

> -----Original Message-----
> From: Peter Robinson [mailto:pbrobinson at gmail.com]
> Sent: Tuesday, July 22, 2014 1:14 PM
> To: Timothy Krantz
> Cc: arm at lists.fedoraproject.org
> Subject: Re: [fedora-arm] FW: Simple routing device advice (mildly OT)
> 
> On Tue, Jul 22, 2014 at 6:06 PM, Timothy Krantz
> <tkrantz at stahurabrenner.com> wrote:
> > Oops forgot to send to the list
> >
> >
> >
> > From: Timothy Krantz [mailto:tkrantz at stahurabrenner.com]
> > Sent: Tuesday, July 22, 2014 10:03 AM
> > To: 'Pete Travis'
> > Subject: RE: [fedora-arm] Simple routing device advice (mildly OT)
> >
> >
> >
> > Hello Fedora ARM hackers,
> >
> > I'm shopping around for a device to provide basic routing and firewall
> > functions.
> >
> > The goal is to provide remote access to an IP camera through satellite
> > internet connection.  To keep the camera and link from getting buried
> > or abused, I want to limit access to connections from a particular
> > /25. If using a dynamic IP, the satellite modem uses NAT and does not
> > offer firewall or port forwarding capability.  If using a static IP, a
> > public IP is routed directly to the inside device, without a firewall.
> >
> > I'm thinking a small multipurpose ARM device would be a cost effective
> > solution.  Any problems that can't be resolved via ssh will be dealt
> > with by post or remote hands, so it must be fairly reliable, not
> > require user intervention to survive power cycles, etc.  I'd like a
> > dual Ethernet device, but a USB nic could do.  There will need to be a
> > case or finished chassis of some sort, preferably one that could
> > protect that second NIC from accidental disconnection or tampering.
> >
> > Is there anything on the market that fits the bill, or am I better off
> > with some OpenWRT supported consumer router, or maybe something
> else?
> >
> > --Pete
> >
> >
> >
> > You might want to take a look at the Dreamplug or Mirabox from
> globalscale.
> > They both have dual Ethernet and cases.  I use both for exactly the
> > reasons you want.  I have run fedora on both but currently run
> > slackware on both for reasons clear only to me.
> 
> The dreamplug is only ARMv5 so is unsupported. I have a mirabox and it does
> work but it has a terrible uboot from the last decade so doesn't support
> device tree OOTB so there's hacks needed to support booting and it's not
> particularly pretty, not something I would recommend particularly to deal
> with remote support.
> 
> Peter

The mirabox u-boot is indeed old and does not support "un-appended" device tree, that is true.  It does work fine with the, albeit ugly, appended device tree.  Mine is running 3.16-rc6 with an appended device tree right now.

Tim