For starters, I would recommend purchasing a hub. All your LAN PC's are on
the same subnet, so you don't need to run the configuration below. You can
get the architecture to work, but it just doesn't follow, for lack of a
better term, common practice. The sort of setup you show is often used,
with hubs connected to eth1 and eth2. The eth1 hub could be your internal
LAN and the eth2 would be a DMZ for running internet servers.
As far as IPChains goes, there are a number of different approaches. See
the "IPCHAINS" and "Firewall and Proxy Serving" HOWTO's. Also, there are
sample scripts available from RedHat that are useful.
Regards,
Rob
> -----Original Message-----
> From: Peter Peltonen [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 20, 2001 7:58 AM
> To: RH List
> Subject: linux as a switch?
>
>
>
> Hi,
>
> I'm building a home network for a friend and was wondering if
> following setup
> would be possible:
>
>
> Internet
>
> |
> |
>
> eth0
>
> LINUX eth1 -- WIN1
>
> eth2
>
> |
> |
>
> WIN2
>
>
> So I would connect the Windoze machines directly to the Linux
> box. And they
> all would be in the same network:
>
> Linux eth1: 192.168.1.1/24
> Linux eth2: 192.168.1.2/24
> WIN1: 192.168.1.3/24
> WIN2: 192.168.1.4/24
>
>
> My routing table would look like this:
>
> Destination Gateway Genmask Flags Metric Ref Use
Iface
> 192.168.1.1 0.0.0.0 255.255.255.255 UH 0 0 0
eth1
> 192.168.1.2 0.0.0.0 255.255.255.255 UH 0 0 0
eth2
> 192.168.1.3 192.168.1.1 255.255.255.255 UG 0 0 0
eth1
> 192.168.1.4 192.168.1.2 255.255.255.255 UG 0 0 0
eth2
> 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0
eth1
> 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0
eth2
> 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
> 0.0.0.0 inet-gw 0.0.0.0 UG 0 0 0
eth0
>
>
> Would it work?
>
> How would I configure my ipchains-firewall in this case? I'd
> the traffic from
> 192.168.1.0/24 network to be masqueraded. And nothing would
> be let in from the
> firewall (except DHCP queries as the Linux box takes it's
> eth0 IP via DHCP).
>
> Or do I have to put Linux's eth1 and eth2 to different
> networks and setup WINS
> so that the Windoze boxes can see eachother?
>
> Regards,
> Peter
>
>
>
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
>
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
