On Wed, 27 Dec 2000, Michael O'Henly wrote:
>My impression is that DrakConf's "internet connection sharing" command runs a
>DHCP server and masquerades IPs. This is more than I need (DHCP) but it works
>so I'll use it.
At http://mandrakeuser.org you can find a few simple tips to run internet
sharing without DHCP. Just a small script on the connecting box and a
gateway setting on the client that uses the line. Very simple, and works
great.
>I'm also looking a pmfirewall <http://www.pointman.org/> to provide a
>firewall. It looks well-documented and well-supported, and is based on
>IPCHAINS.
Good choice, I use that too.
>Questions:
>
>1. Does "internet connection sharing" create any kind of a firewall on its
>own?
No, it does not. It may use ipchains for a few things but that is not for
firewall purposes.
>2. Is there any overlap between "internet connection sharing" (as implemented
>by LM) and pmfirewall? pmfirewall asks whether you're running a DHCP server
>and masquerading IPs, so I think it generates a script that takes into
>account these things.
Correct.
>3. If you have any other advice about how to protect a 1-Linux / 2-Mac home
>network using the Linux box, two ethernet cards and a cable connection, I'd
>be very interested.
After setting up ipchains with pmfirewall's script, also find portsentry
and have that loaded. Works fine against port-attacks. Then you should be
reasonably safe.
Paul
--
At a certain time there is a light at the end of the tunnel.
And it isn't a train.
http://nlpagan.net - ICQ 147208 - Registered Linux User 174403
Linux Mandrake 7.2 - Pine 4.31
