slackware firewall for internal windows network
cg.mk.snow
plug-discuss@lists.PLUG.phoenix.az.us
Sun, 28 Oct 2001 06:32:13 -0700
This is a multi-part message in MIME format.
------=_NextPart_000_0060_01C15F7A.478609A0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
I am still learning linux, so please take any Linux advice i give with a =
grain of salt. However, if you want the IP address of the cable modem =
ethernet card, LAN card, and the dns servers, boot to windows and click =
srart>run. Enter winipcfg in the box, and click ok. This brings up a =
window that shows you all your network info. There is a pull down box =
for each ethernet adapter. You may need to click the "more info" button =
to get some of the info you need. For the dns server ip's, click the =
button that has three periods to the right of the box, and it should =
give you three different addresses. I would recommend writing all the =
info down, including the adapter addresses. This may be doable in Linux, =
but I do not know how to do it.
As far as setting up your system, I am trying to do the same thing as =
you and this is a mini roadmap for what I think should be done.
1) get the linux(server) box connected to the web.
2) Set up home network and test it with ping
3) Get IP forwarding(NAT) working
4) Get firewall working
5) set up samba
6) move my printer onto the server and try to get it to work.
7) I would eventually like to set up apache to serve a web page that is =
reaching a little far for me right now though.
For getting the server computer to see the internet, make sure to follow =
the advice I was given by David Mandala,
In the /etc/sysconfig/network-scripts/ifcfg-eth0 script add a line that =
reads "DHCP_HOSTNAME=3D'your hostname as assinged by cox @home'" and =
then do ifup eth0.That seemed to help me. =20
To make sure the computers are seeing each other, on the win systems =
open a dos prompt and ping the server.
On the linux box, open a console window and use ping on the windows =
boxes.
As for getting the NAT to work, I am afraid i am in the same boat as =
you. I can get my win 98 and ME computers to ping the server, but netwok =
translation still does not work. I think that I need to make sure I set =
the domain on my linux box to to the same as my windows boxes. I may =
need to set up the "work group" up too. I have been working long days =
the last four days so I have not had a chance to look at it.
I hope this helps, I will let you know if I find anything new.
Cliff
----- Original Message -----=20
From: Jeff Barker=20
To: plug-discuss@lists.PLUG.phoenix.az.us=20
Sent: Sunday, October 28, 2001 2:11 AM
Subject: slackware firewall for internal windows network
I'm setting up a firewall for an internal network at home mainly to =
keep security inside the network, and to maximize internal network speed =
and file sharing capabilities.
I want to be able to have the firewall basically transparent using =
ipfiltering so the two computers behind it can still have full access to =
the internet.
I want to use a 192.168.0.x internal network address.
The system is a K62 3D with two network cards, a 3com 3c905b, and a =
netgear FA310Tx card. I have access to the internet using the 3com and =
I've gotten the module support for the tulip driver for the other card =
and set up to use the 192.168.0.x network address.
I use a static IP address setup for eth0 on COX@HOME and run a DNS =
server to be able to lookup names, because I can't get it connected to =
COX any other way without knowing their DNS server addresses. (I lost =
the paper and they don't give them out anymore, they want you to use =
DHCP which incidentally I can't get to work right either)
Anyways, right about here is where I am confused on what to do next to =
get it to forward packets and masquerade or how to configure it as a =
router of anytype.
I'm using Slackware 8.0 with a newly compiled 2.4.5 kernel with =
support for NAT, routing and many other options that I knew I needed in =
setup.
I've read through the many HOWTOs, and other Guides at the LDP =
website, on routing and firewall setup and a lot of it is for Redhat =
which is enough of a difference to confuse me even more.
Does anyone have any knowledge they could pass me, have a setup like =
this yourself that you could share your experiences, or just have some =
advice for me?
oh yeah, I have a hub that I was planning on setting up like this:
Two windows 2000 machines going through a hub, which connects to the =
linux machine through an up port which is connected to the Cable modem =
with the other card.
I want to be able to share files through the two windows machines, and =
even networked drives, but not with the linux machine at all, just those =
two machines.
I did not install samba support because since this was the case I =
didn't think it would be needed.
Ok, where do I start?
------------------------------------------------------------------
J e f f B a r k e r
Stickboy Productions
http://www.stickboyproductions.com
jeff@stickboyproductions.com
home: 602.992.4478
work: 480.315.4325
fax: 480.315.4003
------------------------------------------------------------------=20
------=_NextPart_000_0060_01C15F7A.478609A0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4207.2601" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>I am still learning linux, so please =
take any Linux=20
advice i give with a grain of salt. However, if you want the IP =
address of=20
the cable modem ethernet card, LAN card, and the dns servers, boot to =
windows=20
and click srart>run. Enter winipcfg in the box, and click ok. This =
brings up=20
a window that shows you all your network info. There is a pull down box =
for each=20
ethernet adapter. You may need to click the "more info" button to =
get some=20
of the info you need. For the dns server ip's, click the button that has =
three=20
periods to the right of the box, and it should give you three =
different=20
addresses. I would recommend writing all the info down, including =
the=20
adapter addresses. This may be doable in Linux, but I do not know how to =
do=20
it.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>As far as setting up your system, I =
am trying=20
to do the same thing as you and this is a mini roadmap for what I think =
should=20
be done.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>1) get the linux(server) box connected =
to the=20
web.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>2) Set up home network and test it with =
ping</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>3) Get IP forwarding(NAT) =
working</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>4) Get firewall working</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>5) set up samba</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>6) move my printer onto the server and =
try to get=20
it to work.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>7) I would eventually like to set up =
apache to=20
serve a web page that is reaching a little far for me right now=20
though.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>For getting the server computer to see =
the=20
internet, make sure to follow the advice I was given by David=20
Mandala,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>
<DIV><SPAN class=3D093582906-24102001><FONT face=3DArial color=3D#0000ff =
size=3D2>In the=20
/etc/sysconfig/network-scripts/ifcfg-eth0 script add a line that reads=20
"DHCP_HOSTNAME=3D'your hostname as assinged by cox @home'" and then do =
ifup=20
eth0.</FONT></SPAN><SPAN class=3D093582906-24102001>That seemed to help =
me. =20
</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001></SPAN> </DIV>
<DIV><SPAN class=3D093582906-24102001>To make sure the computers are =
seeing each=20
other, on the win systems open a dos prompt and ping the =
server.</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001></SPAN> </DIV>
<DIV><SPAN class=3D093582906-24102001>On the linux box, open a console =
window and=20
use ping on the windows boxes.</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001></SPAN> </DIV>
<DIV><SPAN class=3D093582906-24102001>As for getting the NAT to work, I =
am afraid=20
i am in the same boat as you. I can get my win 98 and ME computers to =
ping the=20
server, but netwok translation still does not work. I think that I need =
to make=20
sure I set the domain on my linux box to to the same as my windows =
boxes. I may=20
need to set up the "work group" up too. I have been working long days =
the last=20
four days so I have not had a chance to look at it.</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001></SPAN> </DIV>
<DIV><SPAN class=3D093582906-24102001>I hope this helps, I will let you =
know if I=20
find anything new.</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001>Cliff</SPAN></DIV></FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
<A title=3Djeff@stickboyproductions.com=20
href=3D"mailto:jeff@stickboyproductions.com">Jeff Barker</A> </DIV>
<DIV style=3D"FONT: 10pt arial"><B>To:</B> <A=20
title=3Dplug-discuss@lists.PLUG.phoenix.az.us=20
=
href=3D"mailto:plug-discuss@lists.PLUG.phoenix.az.us">plug-discuss@lists.=
PLUG.phoenix.az.us</A>=20
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Sunday, October 28, 2001 =
2:11=20
AM</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Subject:</B> slackware firewall for =
internal=20
windows network</DIV>
<DIV><BR></DIV>I'm setting up a firewall for an internal network at =
home=20
mainly to keep security inside the network, and to maximize internal =
network=20
speed and file sharing capabilities.<BR><BR>I want to be able to have =
the=20
firewall basically transparent using ipfiltering so the two computers =
behind=20
it can still have full access to the internet.<BR><BR>I want to use a=20
192.168.0.x internal network address.<BR><BR>The system is a K62 3D =
with two=20
network cards, a 3com 3c905b, and a netgear FA310Tx card. I have =
access to the=20
internet using the 3com and I've gotten the module support for the =
tulip=20
driver for the other card and set up to use the 192.168.0.x network=20
address.<BR><BR>I use a static IP address setup for eth0 on COX@HOME =
and run a=20
DNS server to be able to lookup names, because I can't get it =
connected to COX=20
any other way without knowing their DNS server addresses. (I lost the =
paper=20
and they don't give them out anymore, they want you to use DHCP which=20
incidentally I can't get to work right either)<BR><BR>Anyways, right =
about=20
here is where I am confused on what to do next to get it to forward =
packets=20
and masquerade or how to configure it as a router of =
anytype.<BR><BR>I'm using=20
Slackware 8.0 with a newly compiled 2.4.5 kernel with support for NAT, =
routing=20
and many other options that I knew I needed in setup.<BR><BR>I've read =
through=20
the many HOWTOs, and other Guides at the LDP website, on routing and =
firewall=20
setup and a lot of it is for Redhat which is enough of a difference to =
confuse=20
me even more.<BR><BR>Does anyone have any knowledge they could pass =
me, have a=20
setup like this yourself that you could share your experiences, or =
just have=20
some advice for me?<BR><BR>oh yeah, I have a hub that I was planning =
on=20
setting up like this:<BR><BR>Two windows 2000 machines going through a =
hub,=20
which connects to the linux machine through an up port which is =
connected to=20
the Cable modem with the other card.<BR><BR>I want to be able to share =
files=20
through the two windows machines, and even networked drives, but not =
with the=20
linux machine at all, just those two machines.<BR><BR>I did not =
install samba=20
support because since this was the case I didn't think it would be=20
needed.<BR><BR>Ok, where do I start?<BR><BR><BR><BR><X-SIGSEP>
<P></X-SIGSEP><FONT=20
=
face=3DVerdana>----------------------------------------------------------=
--------<BR><B>J=20
e f f B a r k e r<BR><BR>Stickboy Productions<BR></B><A=20
href=3D"http://www.stickboyproductions.com/"=20
=
eudora=3D"autourl">http://www.stickboyproductions.com</A><BR>jeff@stickbo=
yproductions.com<BR>home: =20
602.992.4478<BR>work: =20
480.315.4325<BR>fax: =20
=
480.315.4003<BR>---------------------------------------------------------=
---------</FONT>=20
</P></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_0060_01C15F7A.478609A0--