I'm shopping around for a device to provide basic routing and
firewall
functions.
The goal is to provide remote access to an IP camera through satellite
internet connection. To keep the camera and link from getting buried or
abused, I want to limit access to connections from a particular /25. If
using a dynamic IP, the satellite modem uses NAT and does not offer firewall
or port forwarding capability. If using a static IP, a public IP is routed
directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective
solution. Any problems that can't be resolved via ssh will be dealt with by
post or remote hands, so it must be fairly reliable, not require user
intervention to survive power cycles, etc. I'd like a dual Ethernet device,
but a USB nic could do. There will need to be a case or finished chassis of
some sort, preferably one that could protect that second NIC from accidental
disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with
some OpenWRT supported consumer router, or maybe something else?
Probably the closest to your needs at the moment will be the Utilite
[1] as it has models with dual NICs and a case. At the moment the
support in Fedora is basic but I'm working to improve that before the
release of F-21.
Peter
[1]
http://utilite-computer.com/web/utilite-models