yeah, yeah...  Keep on bragging Mr. CTO....  ;-P

BTW, congrats on the new position.

P.S.. The ASCII was not that bad and the idea is correct.
	Just as I thought.

He will probably have to run routed to be able to
use legal IP addresses but the firewall stuff is just fine.

The Wolf

-----Original Message-----
From: J. Francois [mailto:frenchie@magusnet.gilbert.az.us]
Sent: Friday, February 25, 2000 3:04 PM
To: plug-discuss@lists.PLUG.phoenix.az.us
Subject: Re: firewall in Linux help


It seems like on Fri, Feb 25, 2000 at 10:02:24AM -0700, Kelly A Kirby
scribbled:
Orig Msg> I have a dsl router connected to 
Orig Msg> the network hub. To this is connected
Orig Msg> 3 computers with minimum dual boot.
Orig Msg> 
Orig Msg> Each computer would have to have their
Orig Msg> own firewall initiated.
Orig Msg> 
Orig Msg> Thank you
Orig Msg> 
Orig Msg> Kelly
Orig Msg> ---
Orig Msg> http://www.kirbyswebdesigns.com
Orig Msg> designs@kirbyswebdesigns.com
Orig Msg> ICQ: 6576900
Orig Msg> AIM: EvnRane
Orig Msg> 
Orig Msg> On Fri, 25 Feb 2000 11:33:59   Furmanek, Greg wrote:
Orig Msg> >I thought everyone would have jumped on this one.
Orig Msg> >I know a lot of people have firewall knowledge here.
Orig Msg> >
Orig Msg> >To setup packet filtering firewall you should look 
Orig Msg> >at ipchains.
Orig Msg> >There is a pretty decent script for enabling ipchains in:
Orig Msg> >http://www.ecst.csuchico.edu/~dranch/LINUX/TrinityOS.wri
Orig Msg> >
Orig Msg> >Other material:
Orig Msg> >
Orig Msg> >IPCHAINS-HOWTO
Orig Msg> >
Orig Msg> >Of cause I am assuming you are using Linux as
Orig Msg> >your firewall.
Orig Msg> >
Orig Msg> >The Wolf
Orig Msg> >

Sorry, I have companies to run so I am delayed
in answering my PLUG mail :)

Only 1 firewall needed.

UGLY ASCII ART FOLLOWS:          | |--> Host1  
                                 |H|--> Host2
DSL router <--> Linux Firewall <-|U|--> Host3
                                 |B|--> Host4

Configure the DSL router to only accept connections from
the Linux Firewall.
Configure the Hosts to only talk to the firewall.
The firewall will have 2 Ethernet cards, one for each network segment.
Sleep better at night.

I have a 4 port DSL modem and only use 1 port in a configuration
similar to the one above.

See: http://www.magusnet.com/magusnet1.html for an example.

Jean Francois Sends...
President & CEO MagusNet, Inc.
MagusNet.com
CTO EBIZ Enterprises, Inc.
TheLinuxStore.com,TheLinuxLab.com,LinuxWired.net


_______________________________________________
Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss