Re: home network

2006-05-19 Thread Travis H.
On 5/19/06, Travis H. [EMAIL PROTECTED] wrote: Just plug one of the LAN ports into your existing network and leave the WAN unused. Really? I found that my traffic to the internet wasn't getting routed when I did this. Oh... yeah, it has to have an IP on my LAN... which is not 192.168.1/24.

Re: home network

2006-05-19 Thread Terry
On Fri, May 19, 2006 at 04:06:17AM -0500, Travis H. wrote: On 5/19/06, Travis H. [EMAIL PROTECTED] wrote: Just plug one of the LAN ports into your existing network and leave the WAN unused. Really? I found that my traffic to the internet wasn't getting routed when I did this. Oh...

Re: home network

2006-05-19 Thread Terry
On Fri, May 19, 2006 at 08:40:35AM -0500, Travis H. wrote: On 5/19/06, Terry [EMAIL PROTECTED] wrote: I was able to get directly to the web intervace with my laptop connected to one of the ports. I gave the wrt 192.168.1.9 and then put that address into firefox and there it was. I didn't have

Re: home network

2006-05-17 Thread Lou
Re: the linksys wrt54g Just plug one of the LAN ports into your existing network and leave the WAN unused. Turn off the DHCP server and give the linksys device a proper IP on your network. The stock firmware supports this. This is how I am bridging the wireless linksys network to my

Re: home network

2006-05-17 Thread Terry
On Tue, May 16, 2006 at 09:31:39PM -0400, Lou wrote: Re: the linksys wrt54g Just plug one of the LAN ports into your existing network and leave the WAN unused. Turn off the DHCP server and give the linksys device a proper IP on your network. The stock firmware supports this. This is

Re: home network

2006-05-17 Thread Bill Marquette
On 5/16/06, Travis H. [EMAIL PROTECTED] wrote: I can't decide if it would be best for the firewall to be transparant or not. If you're talking about bridging, then that's in direct conflict with your desire to admin it from the outside. The only way to admin a bridging firewall is on the

Re: home network

2006-05-17 Thread Rennie deGraaf
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Travis H. wrote: If you're talking about bridging, then that's in direct conflict with your desire to admin it from the outside. The only way to admin a bridging firewall is on the keyboard and monitor directly attached to it. It is also

home network

2006-05-16 Thread Terry
I'm a newbie at networking and I've been reading Building Firewalls with OpenBSD and PF and a couple of other resources. I have a pdf of how I'm thinking about setting up my home network. http://tyson.homeunix.org/net.pdf Page 2 gives the policies/functionality I would like to have. I want

Re: home network

2006-05-16 Thread Travis H.
On 5/16/06, Terry [EMAIL PROTECTED] wrote: Page 2 gives the policies/functionality I would like to have. I want the system to be secure but I would also like to be able to admin the system from the outside. You want your cake AND you want to eat it? Ambitious! Mostly, there is the threat of

Re: home network

2006-05-16 Thread Terry
On Tue, May 16, 2006 at 11:41:51AM -0500, Travis H. wrote: You want your cake AND you want to eat it? Ambitious! Perhaps a little too ambitious for my level of experience. ;p snip Thanks for the input. I think I'll simplify the plan a little till I can get more experience with pf. -- Terry

Re: Home Network Setup

2006-04-18 Thread Travis H.
I recommend that you use the RFC1918 class B block. 172.16-32.x.x I've seen networks that use 10/8 or 192.168/16 internally, and if you have something like a laptop that needs to travel between your network and others, things can get hairy when IP addresses conflict. I've had to renumber my

Home Network Setup

2006-04-17 Thread Phusion
I have a cable connection at home and was wondering if the following would work. If I put a Cisco 851 series router in front of a pair of Soekris firewalls running OpenBSD using CARP and pfsync. So the Cisco router would get a dynamic WAN IP and have a static LAN IP. The two Soekris firewalls

Re: [Soekris] Home Network Setup

2006-04-17 Thread Justin Krejci
On Sunday 16 April 2006 09:25 pm, Phusion wrote: I have a cable connection at home and was wondering if the following would work. If I put a Cisco 851 series router in front of a pair of Soekris firewalls running OpenBSD using CARP and pfsync. So the Cisco router would get a dynamic WAN IP and

Re: [Soekris] Home Network Setup

2006-04-17 Thread Graham Menhennitt
on the cable side? Also, I don't really understand the need for redundant firewalls (especially for a home network). I would expect the soekris box to be one of the least likely points of failure. CARP and pfsync sounds like overkill. I have a soekris 4801 with a 20Gig HD and a CM9 wireless card. It runs