I am now connected to ADSL by using and ADSL router. The router serves as
a Network Address Translator (NAT). It takes the address 192.168.1.1
(which serves as the gateway to the Internet) and talks to the ADSL modem.
Now my dual boot Win98/Linux machine is connected to the router via
Ethernet and gets the address 192.168.1.100 (or 192.168.1.101 if it was
connected second). A Win98 laptop gets the other address and is connected
via a Phone Network Adaptor.
Now, I have two questions:
1. How do I set up a listening server socket on the Linux machine that
will be accessible to the outside world. If the IP address of the NAT
subnet is 80.x.y.z then I want to bind to 80.x.y.z:8080 or whatever.
2. I'd like to configure a firewall on the Linux box. I used Bastille
Firewall for my plain ADSL connection, but in recent versions of Mandrake
it was superceded by shorewall. It has some configuration files with lots of
comments under /etc/sourcewell, which I suppose I can read and tweak for
my needs.
What I want to accomplish is that no server ports on the Linux box will be
accesible besides an Apache port (that can be anything) which I'd like to
explicitly allow or disallow. Furthermore, I want the Win98 box to be only
able to connect to the Linux box for this same Apache port and for the SMB
services. Now, which parts of these configuration are already handled by
the NAT? Can I do what I want to do using Shorewall?
My Linux system is a Mandrake 9.0 system running on a Pentium III.
Regards,
Shlomi Fish
----------------------------------------------------------------------
Shlomi Fish [EMAIL PROTECTED]
Home Page: http://t2.technion.ac.il/~shlomif/
Home E-mail: [EMAIL PROTECTED]
"Let's suppose you have a table with 2^n cups..."
"Wait a second - is n a natural number?"
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
