On Fri, 2006-14-04 at 10:13 -0700, Wolfgang S. Rupprecht wrote: > > But then I have two D-Links, and I'm very happy with both. > > Folks advocating those consumer firewall / NAT boxes might be > interested to read this. > > http://people.freebsd.org/~phk/dlink/ > > I've seen the same thing done by Linksys and Netgear routers. It > sounds to me like the code running on those boxes is not very highly > audited for correctness, and is hardly ever updated by users even when > bugs are found and the manufacturer issues new code. While these > firewalls usually do run linux they don't have anything like yum to > keep them up-to-date. Not necessarily. The one I use ate home has a tonne of features including, local and remote syslog, emailing the of the local syslog periodically or when full, scheduled updates or notification of available updates and notifications of intrusion detection can be configured. The NTP server can be changed, and as a matter of a fact I have is set to our internal NTP server. Just like anything else you connect to the network, you should check for available updates once in a while if the product does not provide for automatic updates or alerts when new firmware is available.