Re: Hardware needed for home network

2011-02-18 Thread Chris Davies
John Hasler jhas...@debian.org wrote: If the modem is configured as a bridge it won't speak IP to the server: just PPP (over ethernet). To get to the Internet via the modem the other systems would need to speak PPP. So it's possible to bypass the firewall by using PPP? Ugh Chris -- To

Re: Hardware needed for home network

2011-02-15 Thread shawn wilson
i'm not going to comment on the security of this (mainly spoofing a mac address), but will instead comment on how to do this. you'll need a hub or switch and ethernet cable (obviously). take your 'modem' and hook it up to the device, take the computer(s) and hook them up to the device. on your

Re: Hardware needed for home network

2011-02-15 Thread Pascal Hambourg
Tixy a écrit : On Mon, 2011-02-14 at 11:19 +0100, Pascal Hambourg wrote: Tixy a écrit : The server uses PPPoE to talk to the modem, which translates this into PPPoA to get to my IPSs equipment. Are you sure of this ? Isn't your modem rather working as a plain ethernet bridge, just

Re: Hardware needed for home network

2011-02-15 Thread Pascal Hambourg
shawn wilson a écrit : on your server, configure eth0 and eth0:0 (or eth0:1, or whatever you like). setup pppoe to use one of those interfaces. eth0:0 is not an interface, it is a label for an 'IP alias', i.e. another IPv4 address on eth0. You cannot use it with pppoe which requires an

Re: Hardware needed for home network

2011-02-15 Thread Tixy
On Tue, 2011-02-15 at 03:12 -0500, shawn wilson wrote: [... snipped instructions for setting up machine as gateway and router ...] I wasn't the OP, I already had a working setup. If the OP is still reading this branch of the thread he must surely be convinced that a second NIC is the way to go

Re: Hardware needed for home network

2011-02-14 Thread Pascal Hambourg
Hello, Jason Hsu a écrit : I'm in the process of setting up an old computer as a firewall and server. It needs to connect to my DSL modem AND my main computer. However, this old computer (like every other computer I've had) only has one Ethernet port. I know this is old hat for many of you,

Re: Hardware needed for home network

2011-02-14 Thread Pascal Hambourg
Andrei Popescu a écrit : On Sb, 12 feb 11, 18:18:24, Tixy wrote: Would another option not be to just get a switch and not bother with a second Ethernet card in the server? This is the setup I run, i.e. Modem - ++ Firewall/Server --- | Switch | Other system(s) ---

Re: Hardware needed for home network

2011-02-14 Thread Pascal Hambourg
Tixy a écrit : I know this can be done, but is generally not recommended, unless you have very good reasons not to put a second ethernet card in the server and do it properly. My server is a SheevaPlug [2], so no room for another NIC ;-) Then a VLAN-capable switch comes in handy. You can

Re: Hardware needed for home network

2011-02-14 Thread Pascal Hambourg
Tixy a écrit : The server uses PPPoE to talk to the modem, which translates this into PPPoA to get to my IPSs equipment. Are you sure of this ? Isn't your modem rather working as a plain ethernet bridge, just transparently forwarding the PPPoE traffic between its ADSL and ethernet ports ? If

Re: Hardware needed for home network

2011-02-14 Thread Pascal Hambourg
John Hasler a écrit : If the modem is configured as a bridge it won't speak IP to the server: just PPP (over ethernet). Even working as a plain ethernet bridge, an ADSL modem usually has an IP stack for management purpose. Also a bridge does not speak PPP, it just lets PPPoE (an other

Re: Hardware needed for home network

2011-02-14 Thread Tixy
On Mon, 2011-02-14 at 11:19 +0100, Pascal Hambourg wrote: Tixy a écrit : The server uses PPPoE to talk to the modem, which translates this into PPPoA to get to my IPSs equipment. Are you sure of this ? Isn't your modem rather working as a plain ethernet bridge, just transparently

Re: Hardware needed for home network

2011-02-14 Thread Tixy
On Mon, 2011-02-14 at 11:19 +0100, Pascal Hambourg wrote: Tixy a écrit : The server uses PPPoE to talk to the modem, which translates this into PPPoA to get to my IPSs equipment. Are you sure of this ? Isn't your modem rather working as a plain ethernet bridge, just transparently

Re: Hardware needed for home network

2011-02-13 Thread Tixy
On Sun, 2011-02-13 at 03:01 +0200, Andrei Popescu wrote: On Sb, 12 feb 11, 18:18:24, Tixy wrote: Would another option not be to just get a switch and not bother with a second Ethernet card in the server? This is the setup I run, i.e. Modem - ++ Firewall/Server

Re: Hardware needed for home network

2011-02-13 Thread Andrei Popescu
On Du, 13 feb 11, 09:22:56, Tixy wrote: On Sun, 2011-02-13 at 03:01 +0200, Andrei Popescu wrote: On Sb, 12 feb 11, 18:18:24, Tixy wrote: Would another option not be to just get a switch and not bother with a second Ethernet card in the server? This is the setup I run, i.e.

Re: Hardware needed for home network

2011-02-13 Thread Tixy
On Sun, 2011-02-13 at 12:55 +0200, Andrei Popescu wrote: On Du, 13 feb 11, 09:22:56, Tixy wrote: On Sun, 2011-02-13 at 03:01 +0200, Andrei Popescu wrote: On Sb, 12 feb 11, 18:18:24, Tixy wrote: Would another option not be to just get a switch and not bother with a second

Re: Hardware needed for home network

2011-02-13 Thread Andrei Popescu
On Du, 13 feb 11, 11:35:12, Tixy wrote: I couldn't see any practical reason for a second Ethernet interface anyway. There's performance issues when input and output traffic share a single interfaces, but as my ADSL speed is 2% of that of the servers Gigabit Ethernet adaptor, that doesn't

Re: Hardware needed for home network

2011-02-13 Thread Tixy
On Sun, 2011-02-13 at 15:02 +0200, Andrei Popescu wrote: On Du, 13 feb 11, 11:35:12, Tixy wrote: I couldn't see any practical reason for a second Ethernet interface anyway. There's performance issues when input and output traffic share a single interfaces, but as my ADSL speed is 2% of

Re: Hardware needed for home network

2011-02-13 Thread Andrei Popescu
On Du, 13 feb 11, 14:09:12, Tixy wrote: It's not like that, my server's Ethernet interface only has one, private, IP address. The server uses PPPoE to talk to the modem, which translates this into PPPoA to get to my IPSs equipment. So once my server has 'dialled' my ISP the ppp interface

Re: Hardware needed for home network

2011-02-13 Thread Camaleón
On Sun, 13 Feb 2011 14:09:12 +, Tixy wrote: On Sun, 2011-02-13 at 15:02 +0200, Andrei Popescu wrote: Correct me if I'm wrong, but this means you have two IPs on the same interface, one is public and one is RFC 1918 and all your internal computers are connected directly to the big bad

Re: Hardware needed for home network

2011-02-13 Thread John Hasler
Andrei writes: You seem to assume it is impossible for a packet to reach one of the other internal computers without taking the detour via the server (and it's firewall). Maybe I'm paranoid, but I wouldn't base the security of my internal network on this assumption. If I understand correctly

Re: Hardware needed for home network

2011-02-13 Thread Tixy
On Sun, 2011-02-13 at 09:17 -0600, John Hasler wrote: Andrei writes: You seem to assume it is impossible for a packet to reach one of the other internal computers without taking the detour via the server (and it's firewall). Maybe I'm paranoid, but I wouldn't base the security of my

Re: Hardware needed for home network

2011-02-13 Thread Chris Davies
Tixy t...@yxit.co.uk wrote: Would another option not be to just get a switch and not bother with a second Ethernet card in the server? This is the setup I run, i.e. Modem - ++ Firewall/Server --- | Switch | Other system(s) --- ++ Unless there's something

Re: Hardware needed for home network

2011-02-13 Thread John Hasler
Chris writes: Unless there's something strange about your configuration, I don't see how the firewall can firewall in this instance. Can you give me a good reason why Other system(s) shouldn't be able to access the Internet directly via the modem? If the modem is configured as a bridge it

Re: Hardware needed for home network

2011-02-13 Thread Rick Thomas
On Feb 13, 2011, at 9:09 AM, Tixy wrote: (I don't discount me getting something horribly wrong, this setup is only a few weeks old and my first foray into firewalls and routing.) Computer security is so much fun! /-; As others have pointed out, it is *possible* for an attacker to get

Re: Hardware needed for home network

2011-02-12 Thread Andrei Popescu
On Vi, 11 feb 11, 13:37:10, Jason Hsu wrote: I'm in the process of setting up an old computer as a firewall and server. It needs to connect to my DSL modem AND my main computer. However, this old computer (like every other computer I've had) only has one Ethernet port. I know this is old

Re: Hardware needed for home network

2011-02-12 Thread Rob Owens
On Fri, Feb 11, 2011 at 02:21:30PM -0600, Jason Hsu wrote: On Fri, 11 Feb 2011 12:17:24 -0800 David Christensen dpchr...@holgerdanske.com wrote: 3. Netgear fast Ethernet (red) and Gigabit (green and orange) switches with normal/ cross-over auto-sensing. What are the differences

Re: Hardware needed for home network

2011-02-12 Thread Heddle Weaver
On 12 February 2011 22:54, Rob Owens row...@ptd.net wrote: On Fri, Feb 11, 2011 at 02:21:30PM -0600, Jason Hsu wrote: On Fri, 11 Feb 2011 12:17:24 -0800 David Christensen dpchr...@holgerdanske.com wrote: 3. Netgear fast Ethernet (red) and Gigabit (green and orange) switches with

Re: Hardware needed for home network

2011-02-12 Thread Tixy
On Fri, 2011-02-11 at 23:02 +, Chris Davies wrote: If I use a regular Ethernet cable to connect the firewall/server computer to the DSL modem, would it work to use an Ethernet cross-cable and USB-to-Ethernet adapters to provide the connection to my main computer? Are there USB-to-USB

Re: Hardware needed for home network

2011-02-12 Thread Andrei Popescu
On Sb, 12 feb 11, 18:18:24, Tixy wrote: Would another option not be to just get a switch and not bother with a second Ethernet card in the server? This is the setup I run, i.e. Modem - ++ Firewall/Server --- | Switch | Other system(s) --- ++ Yes, but

Hardware needed for home network

2011-02-11 Thread Jason Hsu
I'm in the process of setting up an old computer as a firewall and server. It needs to connect to my DSL modem AND my main computer. However, this old computer (like every other computer I've had) only has one Ethernet port. I know this is old hat for many of you, but I've never done this

Re: Hardware needed for home network

2011-02-11 Thread peasthope
From: Jason Hsu jhsu802...@jasonhsu.com Date: Fri, 11 Feb 2011 13:37:10 -0600 What do I need to connect my firewall/server computer to a DSL modem AND another computer? My notes here might help a little. I have a special talent for errors. If something is puzzling, ask.

Re: Hardware needed for home network

2011-02-11 Thread David Christensen
On 02/11/2011 11:37 AM, Jason Hsu wrote: I'm in the process of setting up an old computer as a firewall and server. It needs to connect to my DSL modem AND my main computer. However, this old computer (like every other computer I've had) only has one Ethernet port. I know this is old hat

Re: Hardware needed for home network

2011-02-11 Thread Jason Hsu
On Fri, 11 Feb 2011 12:17:24 -0800 David Christensen dpchr...@holgerdanske.com wrote: 3. Netgear fast Ethernet (red) and Gigabit (green and orange) switches with normal/ cross-over auto-sensing. What are the differences among a switch, hub, and router? I know that they are used in

Re: Hardware needed for home network

2011-02-11 Thread Chris Davies
Jason Hsu jhsu802...@jasonhsu.com wrote: I'm in the process of setting up an old computer as a firewall and server. It needs to connect to my DSL modem AND my main computer. However, this old computer (like every other computer I've had) only has one Ethernet port. What do I need to connect

Re: Hardware needed for home network

2011-02-11 Thread David Christensen
On 02/11/2011 12:21 PM, Jason Hsu wrote: What are the differences among a switch, hub, and router? I know that they are used in networking, but I don't understand what setups they are appropriate for. There's going to be a lot of information available on the WWW, but as I understand it: *