Re: Any HOWTOs for firewalling? - gazzillion
hi ya
there is a gazillion various "howto".... too much ..that gets confusing...
and just as many different fw config tools and more log analysis stuff
http://www.Linux-Sec.net/Firewall
simplified rules ...
- let your cable modem just transfer info to/from cable modem
into your rj45 -- to the firewall/gw
- setup the ( dual NIC ) fw/gw to 192.168.x.y interal ip#
- setup IP-forwarding(kernel option) and
see the ipmasquerading-howto
- almost done ... except for the simple/complicated fw rules
see the various firewall-howto
- iptables for linux-2.4.x
- ipchains for linux-2.2.x
- your firewall/gw machine should only run ipchains nd turn off
all other services ... ( email, web, etc...
- but than you'd need more servers....( a good thing )
- now you need to do nat'ing from your fw... more howtos
have fun linuxing
alvin
On Mon, 8 Oct 2001, Andrew Pritchard wrote:
> Quoting robin.c.smith@bt.com:
> > I need to setup a firewall box for my ethernet cable modem. Is there a
> > checklist or HOWTO I can use to set up the Debian based firewall?
> >
> > E.g.
> > 1. What is the minimal number of packages I need?
> > 2. How should I setup dhcp ( external to ISP ) and internal to NATed
> > network?
> >
> > Any pointers would be appreciated.
> >
> > Thanks in advance
> >
> > Robin
>
> Yes, there's the Firewall how to and IPMasquerading howtos. These are generic,
> but I have found it all to work for me. Minimum number of pacakages? None I
> don't think - it's built into the kernel!
>
> Do you mean how should I setup a DHCP Server? Do:
> apt-get install dhcp
>
> I have found the Debian DHCP server to be a bit of a pig. The default settings
> from Debian are stupid - but do provide you with a good example. I wish they
> would create a useful dhcp.conf file during the install!
>
>
> "I do not agree with what you say,
> but I will defend to the death your right to say it."
> Francois Marie Arouet Voltaire (1694-1778)
>
>
> --
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
Reply to: