Beta 3 service manual · Network
1U Firewall
The 1U Firewall is the lab's shield, but only while it is online. A live one cuts security heat to about a quarter and turns away break-in attempts.
| Category | Firewall |
|---|---|
| Rack height | 1U |
| Price | $200 |
| Ports | PSU1, PSU2, ETH0 to ETH3, CTL |
| Ships with | one 40 mm fan |
| Slots | 2 fans |
Where it goes
Wire it in the path: line to firewall, firewall to router. An unwired firewall guards nothing.
The heat meter
HEAT on the top bar is how much attention the lab draws online, from 0 to 100. Every earning device online adds to it, and a live firewall cuts the total to about a quarter.
- Under 40 is QUIET: nobody tries the door.
- 40 to 69 is WATCHED: break-in attempts start.
- 70 and up is HUNTED.
The beacon lamp on the face shows it: green calm, amber warm, red hot, strobing during an intrusion.
Features
- IPS. An intrusion that gets past the perimeter is repelled in about 10 seconds. Deep inspection costs x0.95 on revenue.
- STEALTH. Probes get silence and your public IP stops answering pings. Heat builds x0.85.
- FILTER POLICY. Open earns more from hosting and draws more heat. Strict draws less heat and earns a little less.
Security posture
Your router, switch and firewall settings score your exposure from 0 to 100. UPnP, open forwards, an open policy or rogue DHCP raise it. Strict, stealth and IPS lower it. A bad posture lets attacks slip past even a live firewall. posture prints the same report an attacker's scan reads.
Terminal: firewall <fw> ips on, stealth on, policy strict, posture.
See also: 1U Edge Router · Heat and security · The net.