From skenlon at redhat.com Sat Jun 29 19:58:20 2019 Content-Type: multipart/mixed; boundary="===============5659289051849801552==" MIME-Version: 1.0 From: Seth Kenlon To: users at lists.fedoraproject.org Subject: Re: [OT] best (Linux based!) all-in-one NAS-VPN-firewall? Date: Sun, 30 Jun 2019 07:57:44 +1200 Message-ID: <20190629195739.GA18470@skenlon.remote.csb> In-Reply-To: 20190629085125.GB3124@nexaima.net --===============5659289051849801552== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable If I were the consultant in this situation, I'd install CentOS or RHEL on a= well-supported server (probably not rack mountable, since I'm guessing the= y don't have a server room as such), and then install OpenVPN for the VPN, = set up a sensible firewall with firewalld, and enable SAMBA or the f= ile sharing protocol of your choice. = Install Web Console (Cockpit) for them so they can look at the status of th= e machine. They'll look at it once and then never open it again, but it mak= es a good first impression. It's all-in-one because it's running on one box under one OS. I would be sh= ocked if the school admins who hired you meant "all three services must be = running in daemon, under one PID" :-) = -- = Seth Kenlon skenlon(a)redhat.com seth(a)opensource.com PGP(F97393A5) T(+61-735-147125) M(+64-20406-19719) redhat.com | TRIED. TESTED. TRUSTED. | redhat.com/trusted On Sat, Jun 29, 2019 at 10:51:25AM +0200, M. Fioretti wrote: > Greetings, > = > One of my jobs in the next months will be Free Software teaching/ > consulting for a small private school. Part of the consulting consists > of helping the school to evaluate how to set up some infrastructure, > using Linux/Free Software as much as possible. > = > I have been just asked to, quoting, "suggest an all-in-one > NAS-VPN-firewall for the school". We are talking ~80 students in the > 8/13 years age range, maybe more after summer, plus teachers and > administration. The "all-in-one" part is the key requirement, and also > the reason why I am asking for recommendations based on your > real-world experience. I know how to handle this stuff the 100% > DIY/hacker way, but that is not an option in this case. Me, I wouldn't > mind but, while the school would like to use more FOSS also for > administration and internal services, actual teaching has much higher > priority this year. > = > Thanks in advance for any feedback, > Marco > -- = > M. Fioretti http://mfioretti.com http://stop.zona-m.net > = > Your own civil rights and the quality of your life heavily depend on how > software is used *around* you > _______________________________________________ > users mailing list -- users(a)lists.fedoraproject.org > To unsubscribe send an email to users-leave(a)lists.fedoraproject.org > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code= -of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedoraproject.org/archives/list/users(a)list= s.fedoraproject.org --===============5659289051849801552== Content-Type: application/pgp-signature MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="signature.asc" LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251UEcgdjIuMC4yMiAoR05V L0xpbnV4KQoKaVFJY0JBRUJBZ0FHQlFKZEY4S3pBQW9KRUs5NDd1TDVjNU9sVUNFUC9pOXNIU25J MXBGSG1tM1p1RWlUVWJlbworL3VJMjdyeWdsL2pEYmhjaTYzTXZhR210UGFkZFlYaEJwdmp6anN5 a0NocnBsSmNaRUt2RjcxY1pZSjBSM2U0CkJoTGVMaWZpY3RxK3FkSkV2M2gyNWdVOGlXU3ZLRVVX WDFZRU8wK1lIcUw4ZGNOeGdkVCtWNmFPaEplWUxZWjcKRWFCZXJhZlpCaVVXYnNWTVBOSk40WUhG eFE0QjNxZkt5Ym8xcEhIbjNjVkJNa1U2QUZtRDF4UEd1dXRwbWRoVQpjYXBvNU55cVJ1K3l6Wkp3 djBDS1pxYzBoMGdKZUR4WDlDM3pOSXlnWlV1RFQxd3k1YUR1dEM3cFhzZFJ3MTgzCkd1YnNQRHRj VHJ3dU1nREZuT3JzczhIZEMyUVFKcm1BRFNtbXArR1ZrV28wN0V4VmFVMjRuMEYzV2xnSWtWRysK YjlaWFQzM2FZcGZGcXpvemp4RFhUei9BWHRJTHdOUDhLTEZXMVlMcmRJZVZPSndMdThieW5HUDMx cEpNNTFhYwo1M3VPU1R3WEtGbkU4UExqN0M5Zk1YdE1tc2tMQVBLUlZ1L2lId1lQdkFFNkt3MXJT T0FXRFAxTjk2M0ZyYmpsClFtNlNVYm9pZ0h3V2dpTjZkQStVMUVFckVzeUJMTVdaUEg4RzhTZjJI dkdmZWh0Zk01NS9oT2l4TWp2TVhUanMKWEJXNU1aSnFpOW05d01qRS9LRUQyUjY5RS81bXg5Zm1w ckpYRlVjUGJYQ0ZYL1plajNQSkZnS2VQNGhacTg4dgpxRmV2ZWJqTFQ5WUlhQzl6ZUVrUTZ2ajJN emdYc0J0d29ZKzBzY0FJN0pNWS95d0hydkhTOU1Sc3FCMzJKcE1YCi9tbWJ3Q2taSHlhZHlnSnZs Q0JECj13b1NMCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQo= --===============5659289051849801552==--