[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Internet sharing and security



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Sep 02, 2003 at 10:41:19PM +0100, Piers Kittel wrote:
> Which one would be best to use?  

Smoothwall (or ipmasq and add your own rules to forward ports as
needed, but ipmasq Just Works.  I prefer ipmasq).

> Keeping in mind its difficult to 
> control the wireless access using the Linksys.  

I wouldn't bother trying to control this past maybe WEP.  Yeah, not
horrably secure, but neither is anything else you broadcast over the
air.

> the email/ftp/etc server on another PC, and dig out the 486, use that as 
> a bridge between the wireless network and the wired one, and use a VPN 
> tunnel for the laptop?  Or should I not worry too much and just slap the 

VPN is a little overkill for an internal network, just use SSH as
needed.  If you're really concerned about what's going over the
wireless network, the only good solution is not to use wireless
networks.

> Should I keep the firewall PC seperate that to the email/ftp/etc server 
> or is it alright to combine the two?

In a home environment, it's probably safe to combine the two, but a
better method would be to forward just the ports you need to another
machine.  Note that in this environment, FTP connections from the
outside world will have to be passive.

- -- 
 .''`.     Paul Johnson <baloo@ursine.ca>
: :'  :    
`. `'`     proud Debian admin and user
  `-  Debian - when you have better things to do than fix a system
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/VwYTUzgNqloQMwcRAmutAKC/y1kA/KUCcu2MP8hrLk/jQSKlWQCcCqxU
7sJVO+ObUCiLM1DZU3ETI9c=
=CE1o
-----END PGP SIGNATURE-----



Reply to: