Aaron Winters wrote:
> I have 49 Windows PCs (all but 2 are running Win2k and they are 98se),
> 16 Macs one Win2k DC and 1 MDK 8.1 web, ftp, ssh server that I manage.
> They are on a Win2k domain and the DC does all the DNS, the client PCs
> all have static IPs. They all get there gateway out from a Novell server
> that I have no control of. I would like to add some firewall protection
> to my portion of the network (did I mention all the IPs are external!)
> and I want to be able to block the IM clients like Yahoo, AIM by killing
> their ports. Could I add a linux box to be the firewall and gateway
> without to much knowledge of setting this stuff up under Linux. Would it
> work by pointing the Linux box to the current gateway and change the
> clients to point to it for their gateway?
>
> Thanks,
> __________________________
> You're just jealous because the voices are talking to me!
>
>
>
>
>
SNF is a wonderful product for this--put a box with two NICs between the
network and the Novell server and add one static IP on the network
side--there you will need to set up a netmask to enclose your local IPs
(and you can make them local addresses) the other NIC attaches to the
novell server.
Now from any local station once you are installed, run a browser at
https://(IP of SNF):8443 with login admin and password the admin
password you set up at install time. You can configure The internet
connection, specify which traffic goes through each way, forward ports
to ftp or web servers if you like, bust junk by blocking domains using
squidguard, and so on.
SNF is very stable technology, right now based on kernel 2.2, and it is
annoying to some because it does not offer a DMZ, and because editing
the usual files directly on the server as root doesn't make a permanent
configuration.. The browser is the tool of choice or else the study of
the code to find the files that load the config files.
Anyway, it is a neat package that can work with an old P166 and 64M and
a little disk to make your life much easier.
Civileme
QA Team
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com