Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-05 Thread Alan McKay
Go with a dedicated firewall distro like pfSense CentOS can certainly do it, but why bother? -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of In Defense of Food ___ CentOS mailing list CentOS@centos.org

[CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread ML
Hi All, I have a home business circuit and I am gearing up to host my business affairs in my place. I have Comcast and 13 static IP's. I have an extra PIII 1U, 2 9gb SCSI, 1gb RAMm dual NICS. So I am wanting to build a firewall to front end my traffic. Assign one of my statics to it and

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread Max Hetrick
ML wrote: I used to work with PIX 525's so I have knowledge, I just dont quite know how to do this with CentOS and such. Can anyone offer advice? Nothing against CentOS, but if this is going to be a dedicated firewall, have you thought of using an appliance type OS/application? I've

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread Ryan Wagoner
You don't need to have Comcast route all traffic to that IP. You just need to put two NICs in the server and place it between Comcast and your servers. Then using iptables you can configure CentOS to deny / allow traffic to IPs on specific ports. I know this is a CentOS list, but if you want

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread Alan Sparks
Not that it's incredibly difficult to do by hand, but it is a complex undertaking fraught with some risk in doing it wrong. I believe you'd be much better served looking at some of the firewall applications out there, such as IPCop or Smoothwall. Another one to look at is Shorewall

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread Victor Padro
On Thu, Oct 1, 2009 at 4:02 PM, Max Hetrick maxhetr...@verizon.net wrote: ML wrote: I used to work with PIX 525's so I have knowledge, I just dont quite know how to do this with CentOS and such. Can anyone offer advice? Nothing against CentOS, but if this is going to be a dedicated

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread John R Pierce
ML wrote: Can anyone offer advice? pfSense. can even boot it off a CD and use a USB flash stick for configuration storage so you don't need a hard drive. or boot it off a 128MB CF card. doesn't need a display after initial setup (actually, can even be configured with a serial terminal

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread Robert Spangler
On Thursday 01 October 2009 16:56, ML wrote: I have a home business circuit and I am gearing up to host my business affairs in my place. I have Comcast and 13 static IP's. I have an extra PIII 1U, 2 9gb SCSI, 1gb RAMm dual NICS. If you can, I would place a 3rd NIC into this device and use

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread Stephen Nelson-Smith
On 1 Oct 2009, at 21:56, ML wrote: So I am wanting to build a firewall to front end my traffic. Assign one of my statics to it and have Comcast statically route my traffic to this IP. You don't need to do this. You can run all the IPs on the firewall box, and route them to machines on a

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread ML
Hi All, I've also looked at Vyatta, and heard good things about pfsense. Some have also recommended IPcop or pfsense. Has anyone used Untangle? http://www.untangle.com/ What are the differences between these... -ML ___ CentOS mailing list

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread Florin Andrei
ML wrote: I used to work with PIX 525's so I have knowledge, I just dont quite know how to do this with CentOS and such. Firewall Builder. http://www.fwbuilder.org/ But if you've configured the PIX in command-line mode, iptables is not that hard. You could setup a local firewall right on

Re: [CentOS] Build a Firewall (Can I learn to do this...)

2009-10-01 Thread Drew
If you want a simple packet filtering firewall then CentOS or one of the purpose built linux firewall distro's will suit you well. If you want more then just packet filtering, there are better options. You haven't mentioned what sort of business applications you are running. How vital to your