Re: Firewalling under Debian

2003-03-04 Thread bob parker
On Tue, 4 Mar 2003 02:04, Russell Shaw wrote: bob parker wrote: My son's proposed network is to be this: Firewall / NAT / Gateway machine connected to cable using 1 nic. Connects to hardware router / switch using 2nd nic. He has the switch and will be buying a PIII 400 2nd hand for the

Firewalling under Debian

2003-03-03 Thread bob parker
My son's proposed network is to be this: Firewall / NAT / Gateway machine connected to cable using 1 nic. Connects to hardware router / switch using 2nd nic. He has the switch and will be buying a PIII 400 2nd hand for the fw. We both know it's overkill but spares for PIIIs are cheaper than

Re: Firewalling under Debian

2003-03-03 Thread Jeremy T. Bouse
Well if you have atleast one machine running with X11 you could install Firewall Builder (fwbuilder)[1] which has a relatively straight forward GUI that will allow you to drag and drop to create the rules you want for the firewal... It then compiles to build a shell script which you can

Re: Firewalling under Debian

2003-03-03 Thread Jamin Collins
On Tue, Mar 04, 2003 at 12:11:12AM +1100, bob parker wrote: My son's proposed network is to be this: Firewall / NAT / Gateway machine connected to cable using 1 nic. Connects to hardware router / switch using 2nd nic. No need for an additional router, the Linux firewall can provide this

Re: Firewalling under Debian

2003-03-03 Thread bob parker
On Tue, 4 Mar 2003 00:59, Jamin Collins wrote: On Tue, Mar 04, 2003 at 12:11:12AM +1100, bob parker wrote: My son's proposed network is to be this: Firewall / NAT / Gateway machine connected to cable using 1 nic. Connects to hardware router / switch using 2nd nic. No need for an

Re: Firewalling under Debian

2003-03-03 Thread bob parker
On Tue, 4 Mar 2003 00:36, Jeremy T. Bouse wrote: Well if you have atleast one machine running with X11 you could install Firewall Builder (fwbuilder)[1] which has a relatively straight forward GUI that will allow you to drag and drop to create the rules you want for the firewal... It

Re: Firewalling under Debian

2003-03-03 Thread Benedict Verheyen
Op ma 03-03-2003, om 15:03 schreef Jamin Collins: On Mon, Mar 03, 2003 at 05:36:54AM -0800, Jeremy T. Bouse wrote: Well if you have atleast one machine running with X11 you could install Firewall Builder (fwbuilder)[1] which has a relatively straight forward GUI that will allow you to

Re: Firewalling under Debian

2003-03-03 Thread Russell Shaw
bob parker wrote: My son's proposed network is to be this: Firewall / NAT / Gateway machine connected to cable using 1 nic. Connects to hardware router / switch using 2nd nic. He has the switch and will be buying a PIII 400 2nd hand for the fw. We both know it's overkill but spares for PIIIs are

Re: Firewalling under Debian

2003-03-03 Thread Fraser Campbell
On Monday 03 March 2003 08:11, bob parker wrote: The fw machine is to run Debian with 2.4 kernel and iptables. My question is, what is the best way to go about setting up the Debian fw machine? Shorewall is an iptables based firewalling framework, it looks like a very capable (I haven't

Re: Firewalling under Debian

2003-03-03 Thread Troy Arnold
On Mon, Mar 03, 2003 at 09:49:57AM -0500, Fraser Campbell wrote: On Monday 03 March 2003 08:11, bob parker wrote: The fw machine is to run Debian with 2.4 kernel and iptables. My question is, what is the best way to go about setting up the Debian fw machine? Shorewall is an iptables

Re: Firewalling under Debian

2003-03-03 Thread Osamu Aoki
Hi, On Tue, Mar 04, 2003 at 12:11:12AM +1100, bob parker wrote: My son's proposed network is to be this: Firewall / NAT / Gateway machine connected to cable using 1 nic. Connects to hardware router / switch using 2nd nic. He has the switch and will be buying a PIII 400 2nd hand for the fw.

Re: Firewalling under Debian

2003-03-03 Thread Jeremy T. Bouse
On Tue, Mar 04, 2003 at 01:38:01AM +1100, bob parker wrote: Now that is appealing, I run 3.0r1, so I can build the fw script on my m/c. Does it support iptables? I am a complete newbie at this but I think I should go for the latest techniques. Thanks Bob Firewall Builder has

Re: Firewalling under Debian

2003-03-03 Thread Jeremy T. Bouse
Actually my firewall has no X installed on it... I use fwbuilder on my workstation behind the firewall and copy the script over via scp... My firewall is a dedicated head-less machine with a 4-port switch card for the external interface and a 10/100 NIC for the internal... Jeremy

Re: Firewalling under Debian

2003-03-03 Thread Edward Guldemond
On Tue, Mar 04, 2003 at 02:04:38AM +1100, Russell Shaw wrote: Just connect the two new PCs into two NICs on the gateway pc. Verify the local connections work and that the cable connection works on the gateway pc, then install ipmasq. This works, but be sure to check /usr/share/doc/ipmasq for