[NTLUG:Discuss] Advice? Router/firewall/email server/backup on same box

[Kevin Brannen]

Dennis Daupert wrote:

>...
>I have an old Optiplex, mobo is dead, want to upgrade
>and build router/firewall, process email for my local
>lan w/ spam and virus filtering, and run a Subversion
>server and big harddrive to backup local machine home
>directories.
>
>I imagine there are security considerations. Any
>advice?
>  
>
...

Don't put all of that on 1 machine.  If you're going to build a 
router/firewall, you should put that and only that software on the one 
machine.  The less that's there, the less chance of something breaking 
or being broken into, and the less to keep updated.  The other's advice 
about having the fewest ports open is also excellent advice you should 
follow.

There's no security reason not to put the rest on the same machine.  Of 
course, you need to make sure your backup "area" is a separate drive, so 
that if it goes down, the original stuff is good; or if the original 
drives die, the backup is good.

If it were me, I'd just go spend the $60 or so and by a small hardware 
route/firewall, then use the box to do all the other stuff.  But if you 
got enough old boxes available, hey, have fun and learn something new. :-)

HTH,
Kevin