Re: Setup a firewall/gateway/server

2012-01-14 Thread Csanyi Pal
Csanyi Pal writes: > Andrei Popescu writes: > >> On Sb, 14 ian 12, 20:18:31, Csanyi Pal wrote: > Now, after I rebooted with my headless system, I can to SSH to it, and > that is the good news. > > The bad news is that that I can't browse the Internet from the LAN > behind the headless machine

Re: Setup a firewall/gateway/server

2012-01-14 Thread Csanyi Pal
Andrei Popescu writes: > On Sb, 14 ian 12, 20:18:31, Csanyi Pal wrote: >> >> I must to reinstall instead of fixing the problem because this is a >> headless PC Box, so if I make a mistake then it can be happen that that >> I can't to SSH into that system again to fix the problem this way. > > Th

Re: Setup a firewall/gateway/server

2012-01-14 Thread Andrei Popescu
On Sb, 14 ian 12, 20:18:31, Csanyi Pal wrote: > > I must to reinstall instead of fixing the problem because this is a > headless PC Box, so if I make a mistake then it can be happen that that > I can't to SSH into that system again to fix the problem this way. There is always a way: rescue disk w

Re: Setup a firewall/gateway/server

2012-01-14 Thread Csanyi Pal
Andrei Popescu writes: > On Sb, 14 ian 12, 12:48:42, Csanyi Pal wrote: >> >> allow-hotplug eth0 >> iface eth0 inet dhcp >> >> allow-hotplug eth1 >> iface eth1 inet static >> address 192.168.10.1 >> netmask 255.255.255.0 >> I setup IP Forwarding so: >> nano /etc/sysctl.conf >> # Unco

Re: Setup a firewall/gateway/server

2012-01-14 Thread Andrei Popescu
On Sb, 14 ian 12, 12:48:42, Csanyi Pal wrote: > > allow-hotplug eth0 > iface eth0 inet dhcp > > allow-hotplug eth1 > iface eth1 inet static > address 192.168.10.1 > netmask 255.255.255.0 > gateway 192.168.10.1 > > Should I remve the gateway 192.168.10.1 option? Yes (a machine can no

Re: Setup a firewall/gateway/server

2012-01-14 Thread Csanyi Pal
Bob Proulx writes: > Csanyi Pal wrote: >> So far I have setup NIC's: > You are missing this line: allow-hotplug eth0 iface eth0 inet dhcp allow-hotplug eth1 iface eth1 inet static address 192.168.10.1 netmask 255.255.255.0 gateway 192.168.10.1 Should I remve the gateway 192.16

Re: Setup a firewall/gateway/server

2012-01-13 Thread Pascal Hambourg
Hello, Csanyi Pal a écrit : > > iface eth1 inet static > address 192.168.10.1 > netmask 255.255.255.0 > network 192.168.10.0 > broadcast 192.168.10.255 This line is wrong : > gateway 192.168.10.1 A host cannot be its own gateway. Also there can be only one default gateway, a

Re: Setup a firewall/gateway/server

2012-01-13 Thread Bob Proulx
Csanyi Pal wrote: > I want to setup my headless pc box on which run a Debian Squeeze system > for firewall/gateway/server for my home LAN. Sounds good. > What I want is to protect my LAN and to get a web server that is > reachable from the Internet and from LAN too. Sure. > I want to use Shorew

Re: Setup a firewall/gateway/server

2012-01-13 Thread Andrei Popescu
On Vi, 13 ian 12, 22:04:02, Csanyi Pal wrote: > > I want to use Shorewall as firewall manager and apache2 as a webserver. ... > IP Forwarding: > cat /proc/sys/net/ipv4/ip_forward > 1 > > but this setup doesn't work yet. Why? No idea, never got it to work either, but I just used Shorewall to setu

Setup a firewall/gateway/server

2012-01-13 Thread Csanyi Pal
Hi, I want to setup my headless pc box on which run a Debian Squeeze system for firewall/gateway/server for my home LAN. What I want is to protect my LAN and to get a web server that is reachable from the Internet and from LAN too. I want to use Shorewall as firewall manager and apache2 as a web