Re: Firewalling under Debian

2003-03-04 Thread bob parker
On Tue, 4 Mar 2003 02:04, Russell Shaw wrote: > bob parker wrote: > > My son's proposed network is to be this: > > > > Firewall / NAT / Gateway machine connected to cable using 1 nic. > > Connects to hardware router / switch using 2nd nic. > > He has the switch and will be buying a PIII 400 2nd han

Re: Firewalling under Debian

2003-03-03 Thread Edward Guldemond
On Tue, Mar 04, 2003 at 02:04:38AM +1100, Russell Shaw wrote: > Just connect the two new PCs into two NICs on the gateway pc. Verify the > local connections work and that the cable connection works on the gateway > pc, then install ipmasq. This works, but be sure to check /usr/share/doc/ipmasq for

Re: Firewalling under Debian

2003-03-03 Thread Jeremy T. Bouse
Actually my firewall has no X installed on it... I use fwbuilder on my workstation behind the firewall and copy the script over via scp... My firewall is a dedicated head-less machine with a 4-port switch card for the external interface and a 10/100 NIC for the internal... Jeremy

Re: Firewalling under Debian

2003-03-03 Thread Jeremy T. Bouse
On Tue, Mar 04, 2003 at 01:38:01AM +1100, bob parker wrote: > Now that is appealing, I run 3.0r1, so I can build the fw script on my m/c. > Does it support iptables? I am a complete newbie at this but I think I should > go for the latest techniques. > > Thanks > Bob > Firewall Builder ha

Re: Firewalling under Debian

2003-03-03 Thread Osamu Aoki
Hi, On Tue, Mar 04, 2003 at 12:11:12AM +1100, bob parker wrote: > My son's proposed network is to be this: > > Firewall / NAT / Gateway machine connected to cable using 1 nic. > Connects to hardware router / switch using 2nd nic. > He has the switch and will be buying a PIII 400 2nd hand for the

Re: Firewalling under Debian

2003-03-03 Thread Troy Arnold
On Mon, Mar 03, 2003 at 09:49:57AM -0500, Fraser Campbell wrote: > On Monday 03 March 2003 08:11, bob parker wrote: > > > The fw machine is to run Debian with 2.4 kernel and iptables. > > My question is, what is the best way to go about setting up the Debian fw > > machine? > > Shorewall is an ip

Re: Firewalling under Debian

2003-03-03 Thread Fraser Campbell
On Monday 03 March 2003 08:11, bob parker wrote: > The fw machine is to run Debian with 2.4 kernel and iptables. > My question is, what is the best way to go about setting up the Debian fw > machine? Shorewall is an iptables based firewalling framework, it looks like a very capable (I haven't ac

Re: Firewalling under Debian

2003-03-03 Thread Russell Shaw
bob parker wrote: My son's proposed network is to be this: Firewall / NAT / Gateway machine connected to cable using 1 nic. Connects to hardware router / switch using 2nd nic. He has the switch and will be buying a PIII 400 2nd hand for the fw. We both know it's overkill but spares for PIIIs are c

Re: Firewalling under Debian

2003-03-03 Thread Benedict Verheyen
Op ma 03-03-2003, om 15:03 schreef Jamin Collins: > On Mon, Mar 03, 2003 at 05:36:54AM -0800, Jeremy T. Bouse wrote: > > > Well if you have atleast one machine running with X11 you could > > install Firewall Builder (fwbuilder)[1] which has a relatively straight > > forward GUI that will allow

Re: Firewalling under Debian

2003-03-03 Thread bob parker
On Tue, 4 Mar 2003 00:36, Jeremy T. Bouse wrote: > Well if you have atleast one machine running with X11 you could > install Firewall Builder (fwbuilder)[1] which has a relatively straight > forward GUI that will allow you to drag and drop to create the rules you > want for the firewal... It

Re: Firewalling under Debian

2003-03-03 Thread bob parker
On Tue, 4 Mar 2003 00:59, Jamin Collins wrote: > On Tue, Mar 04, 2003 at 12:11:12AM +1100, bob parker wrote: > > My son's proposed network is to be this: > > > > Firewall / NAT / Gateway machine connected to cable using 1 nic. > > Connects to hardware router / switch using 2nd nic. > > No need for

Re: Firewalling under Debian

2003-03-03 Thread Jamin Collins
On Tue, Mar 04, 2003 at 12:11:12AM +1100, bob parker wrote: > My son's proposed network is to be this: > > Firewall / NAT / Gateway machine connected to cable using 1 nic. > Connects to hardware router / switch using 2nd nic. No need for an additional router, the Linux firewall can provide this f

Re: Firewalling under Debian

2003-03-03 Thread Jamin Collins
On Mon, Mar 03, 2003 at 05:36:54AM -0800, Jeremy T. Bouse wrote: > Well if you have atleast one machine running with X11 you could > install Firewall Builder (fwbuilder)[1] which has a relatively straight > forward GUI that will allow you to drag and drop to create the rules you > want for t

Re: Firewalling under Debian

2003-03-03 Thread Jeremy T. Bouse
Well if you have atleast one machine running with X11 you could install Firewall Builder (fwbuilder)[1] which has a relatively straight forward GUI that will allow you to drag and drop to create the rules you want for the firewal... It then compiles to build a shell script which you can the

Firewalling under Debian

2003-03-03 Thread bob parker
My son's proposed network is to be this: Firewall / NAT / Gateway machine connected to cable using 1 nic. Connects to hardware router / switch using 2nd nic. He has the switch and will be buying a PIII 400 2nd hand for the fw. We both know it's overkill but spares for PIIIs are cheaper than earlie