linux router/firewall solution

Started by Rad_Man, August 19, 2003, 01:20:13 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Rad_Man

I have obtained an old 486 PC that I want to use as a firewall/router for the home office(sick of configuring my own PC when working from home with the lappy). I have suse 8.0 server installed, 2 PCI NIC's and awaiting instructions on how to setup the firewall side(so i can still play CS(when i get a chance!!!!)) The setup I want is this

Internet->Cable Modem->router/firewall/SUSE/Domino->Hub->Lan

I have downloaded a program (that fits on a Floppy) called freesco which is very simple and works, but I need to load Domino R6 on the linux box as well to test and develop for work......so i am thinking of staying with suse 8.0 (as domino LOVES IT).  

Thats the crap......now .....how do i do the firewall thing on SUSE? IP masquerading?????????NAT?????? IP Chains.......IPTables.......WTF are they and I DONT WANT TO LOSE THE ABILITY TO PLAY CS through the box either?
"Do, or do not. There is no \'try\'."

lionheart

Get on with your fecking work!!!!! :)
[SIGPIC][/SIGPIC]

DogMeat

#2
......
[SIGPIC][/SIGPIC]
Some pixies. No cars. No talent.

Gandalf

ok, so you have a router. that is running NAT right? Why do you need a firewall? A natted router will not let any nasties in anyway.

The way that I'd do it is below (assuming the router only has 1 lan port)

Internet > Modem > Router > Switch > PC's

If the router is a DHCP router (most have) then enable that and all you need to do is plug a laptop into the switch and it'll get all the info it needs to access the internet. It will be secure too unless you already have trojans on your machine, but then your virus scanner will have caught them right ;)

Above is the exact way that I have my home lan set. I also have a laptop that I can plug in either at home or at work with no config changes at all.
*G*

Cake: Four large eggs. One cup semi-sweet chocolate chips. Three/four cups butter or margarine. One and two third cups granulated sugar. Two cups all purpose flour. Fish shaped ethyl benzene. Twelve medium geosynthetic membranes. Three tablespoons rhubarb, on fire.

DogMeat

#4
......
[SIGPIC][/SIGPIC]
Some pixies. No cars. No talent.

Rad_Man

Gandy u network guru, the linux box is going to be the router and firewall.

I have one NIC that is a DHCP client(cable modem-dynamically assigned from ISP) and the other NIC is ma LAN which will be running DHCP server.

So you think that I dont even need to start a firewall on the suse box, it is already protected by having 2 NIC's?
"Do, or do not. There is no \'try\'."

Gandalf

ahh, got it. misread.

for Linux you'll need to consult the oracles :)
*G*

Cake: Four large eggs. One cup semi-sweet chocolate chips. Three/four cups butter or margarine. One and two third cups granulated sugar. Two cups all purpose flour. Fish shaped ethyl benzene. Twelve medium geosynthetic membranes. Three tablespoons rhubarb, on fire.

Anonymous

Quoteahh, got it. misread.

for Linux you'll need to consult the oracles :)
I thought oracle was a database? or did I miss something?

A Twig

Not one of you better efforts BB!!!  :D  :wink:
[N~@] - Ninja Association
Although we may fade from life, life does not fade from our memories


Rad_Man

Yep got coyote down and thats cool!!!!!.........happy with that but i have a 6gig hardy doing nothing and suse 8.0 server doing nothing.........who are the oracles? - doggers? -styker? iptables hmmmmm that sounds technical?
"Do, or do not. There is no \'try\'."

Rad_Man

I am happy with coyote, easy to configure and works a treat. I will discuss iptables with doggers at the lan feast.
"Do, or do not. There is no \'try\'."