slackware firewall for internal windows network
Tom Achtenberg
plug-discuss@lists.PLUG.phoenix.az.us
Sun, 28 Oct 2001 07:22:49 -0700
This is a multi-part message in MIME format.
--------------InterScan_NT_MIME_Boundary
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0005_01C15F81.5A52A4B0"
------=_NextPart_000_0005_01C15F81.5A52A4B0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Windows 2000 does not use winipcfg
-----Original Message-----
From: plug-discuss-admin@lists.PLUG.phoenix.az.us
[mailto:plug-discuss-admin@lists.PLUG.phoenix.az.us]On Behalf Of cg.mk.snow
Sent: Sunday, October 28, 2001 6:32 AM
To: plug-discuss@lists.PLUG.phoenix.az.us
Subject: Re: slackware firewall for internal windows network
I am still learning linux, so please take any Linux advice i give with a
grain of salt. However, if you want the IP address of the cable modem
ethernet card, LAN card, and the dns servers, boot to windows and click
srart>run. Enter winipcfg in the box, and click ok. This brings up a window
that shows you all your network info. There is a pull down box for each
ethernet adapter. You may need to click the "more info" button to get some
of the info you need. For the dns server ip's, click the button that has
three periods to the right of the box, and it should give you three
different addresses. I would recommend writing all the info down, including
the adapter addresses. This may be doable in Linux, but I do not know how to
do it.
As far as setting up your system, I am trying to do the same thing as you
and this is a mini roadmap for what I think should be done.
1) get the linux(server) box connected to the web.
2) Set up home network and test it with ping
3) Get IP forwarding(NAT) working
4) Get firewall working
5) set up samba
6) move my printer onto the server and try to get it to work.
7) I would eventually like to set up apache to serve a web page that is
reaching a little far for me right now though.
For getting the server computer to see the internet, make sure to follow the
advice I was given by David Mandala,
In the /etc/sysconfig/network-scripts/ifcfg-eth0 script add a line that
reads "DHCP_HOSTNAME='your hostname as assinged by cox @home'" and then do
ifup eth0.That seemed to help me.
To make sure the computers are seeing each other, on the win systems open a
dos prompt and ping the server.
On the linux box, open a console window and use ping on the windows boxes.
As for getting the NAT to work, I am afraid i am in the same boat as you. I
can get my win 98 and ME computers to ping the server, but netwok
translation still does not work. I think that I need to make sure I set the
domain on my linux box to to the same as my windows boxes. I may need to set
up the "work group" up too. I have been working long days the last four days
so I have not had a chance to look at it.
I hope this helps, I will let you know if I find anything new.
Cliff
----- Original Message -----
From: Jeff Barker
To: plug-discuss@lists.PLUG.phoenix.az.us
Sent: Sunday, October 28, 2001 2:11 AM
Subject: slackware firewall for internal windows network
I'm setting up a firewall for an internal network at home mainly to keep
security inside the network, and to maximize internal network speed and file
sharing capabilities.
I want to be able to have the firewall basically transparent using
ipfiltering so the two computers behind it can still have full access to the
internet.
I want to use a 192.168.0.x internal network address.
The system is a K62 3D with two network cards, a 3com 3c905b, and a
netgear FA310Tx card. I have access to the internet using the 3com and I've
gotten the module support for the tulip driver for the other card and set up
to use the 192.168.0.x network address.
I use a static IP address setup for eth0 on COX@HOME and run a DNS server
to be able to lookup names, because I can't get it connected to COX any
other way without knowing their DNS server addresses. (I lost the paper and
they don't give them out anymore, they want you to use DHCP which
incidentally I can't get to work right either)
Anyways, right about here is where I am confused on what to do next to get
it to forward packets and masquerade or how to configure it as a router of
anytype.
I'm using Slackware 8.0 with a newly compiled 2.4.5 kernel with support
for NAT, routing and many other options that I knew I needed in setup.
I've read through the many HOWTOs, and other Guides at the LDP website, on
routing and firewall setup and a lot of it is for Redhat which is enough of
a difference to confuse me even more.
Does anyone have any knowledge they could pass me, have a setup like this
yourself that you could share your experiences, or just have some advice for
me?
oh yeah, I have a hub that I was planning on setting up like this:
Two windows 2000 machines going through a hub, which connects to the linux
machine through an up port which is connected to the Cable modem with the
other card.
I want to be able to share files through the two windows machines, and
even networked drives, but not with the linux machine at all, just those two
machines.
I did not install samba support because since this was the case I didn't
think it would be needed.
Ok, where do I start?
------------------------------------------------------------------
J e f f B a r k e r
Stickboy Productions
http://www.stickboyproductions.com
jeff@stickboyproductions.com
home: 602.992.4478
work: 480.315.4325
fax: 480.315.4003
------------------------------------------------------------------
------=_NextPart_000_0005_01C15F81.5A52A4B0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4807.2300" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><SPAN class=3D655222214-28102001><FONT face=3DVerdana =
color=3D#0000ff>Windows=20
2000 does not use winipcfg</FONT></SPAN></DIV>
<DIV><SPAN class=3D655222214-28102001></SPAN> </DIV>
<DIV class=3DOutlookMessageHeader dir=3Dltr align=3Dleft><FONT =
face=3DTahoma=20
size=3D2>-----Original Message-----<BR><B>From:</B>=20
plug-discuss-admin@lists.PLUG.phoenix.az.us=20
[mailto:plug-discuss-admin@lists.PLUG.phoenix.az.us]<B>On Behalf Of=20
</B>cg.mk.snow<BR><B>Sent:</B> Sunday, October 28, 2001 6:32 =
AM<BR><B>To:</B>=20
plug-discuss@lists.PLUG.phoenix.az.us<BR><B>Subject:</B> Re: slackware =
firewall=20
for internal windows network<BR><BR></FONT></DIV>
<DIV><FONT face=3DArial size=3D2>I am still learning linux, so please =
take any Linux=20
advice i give with a grain of salt. However, if you want the IP =
address of=20
the cable modem ethernet card, LAN card, and the dns servers, boot to =
windows=20
and click srart>run. Enter winipcfg in the box, and click ok. This =
brings up=20
a window that shows you all your network info. There is a pull down box =
for each=20
ethernet adapter. You may need to click the "more info" button to =
get some=20
of the info you need. For the dns server ip's, click the button that has =
three=20
periods to the right of the box, and it should give you three =
different=20
addresses. I would recommend writing all the info down, including =
the=20
adapter addresses. This may be doable in Linux, but I do not know how to =
do=20
it.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>As far as setting up your system, I =
am trying=20
to do the same thing as you and this is a mini roadmap for what I think =
should=20
be done.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>1) get the linux(server) box connected =
to the=20
web.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>2) Set up home network and test it with =
ping</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>3) Get IP forwarding(NAT) =
working</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>4) Get firewall working</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>5) set up samba</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>6) move my printer onto the server and =
try to get=20
it to work.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>7) I would eventually like to set up =
apache to=20
serve a web page that is reaching a little far for me right now=20
though.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>For getting the server computer to see =
the=20
internet, make sure to follow the advice I was given by David=20
Mandala,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>
<DIV><SPAN class=3D093582906-24102001><FONT face=3DArial color=3D#0000ff =
size=3D2>In the=20
/etc/sysconfig/network-scripts/ifcfg-eth0 script add a line that reads=20
"DHCP_HOSTNAME=3D'your hostname as assinged by cox @home'" and then do =
ifup=20
eth0.</FONT></SPAN><SPAN class=3D093582906-24102001>That seemed to help =
me. =20
</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001></SPAN> </DIV>
<DIV><SPAN class=3D093582906-24102001>To make sure the computers are =
seeing each=20
other, on the win systems open a dos prompt and ping the =
server.</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001></SPAN> </DIV>
<DIV><SPAN class=3D093582906-24102001>On the linux box, open a console =
window and=20
use ping on the windows boxes.</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001></SPAN> </DIV>
<DIV><SPAN class=3D093582906-24102001>As for getting the NAT to work, I =
am afraid=20
i am in the same boat as you. I can get my win 98 and ME computers to =
ping the=20
server, but netwok translation still does not work. I think that I need =
to make=20
sure I set the domain on my linux box to to the same as my windows =
boxes. I may=20
need to set up the "work group" up too. I have been working long days =
the last=20
four days so I have not had a chance to look at it.</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001></SPAN> </DIV>
<DIV><SPAN class=3D093582906-24102001>I hope this helps, I will let you =
know if I=20
find anything new.</SPAN></DIV>
<DIV><SPAN class=3D093582906-24102001>Cliff</SPAN></DIV></FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
<A title=3Djeff@stickboyproductions.com=20
href=3D"mailto:jeff@stickboyproductions.com">Jeff Barker</A> </DIV>
<DIV style=3D"FONT: 10pt arial"><B>To:</B> <A=20
title=3Dplug-discuss@lists.PLUG.phoenix.az.us=20
=
href=3D"mailto:plug-discuss@lists.PLUG.phoenix.az.us">plug-discuss@lists.=
PLUG.phoenix.az.us</A>=20
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Sunday, October 28, 2001 =
2:11=20
AM</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Subject:</B> slackware firewall for =
internal=20
windows network</DIV>
<DIV><BR></DIV>I'm setting up a firewall for an internal network at =
home=20
mainly to keep security inside the network, and to maximize internal =
network=20
speed and file sharing capabilities.<BR><BR>I want to be able to have =
the=20
firewall basically transparent using ipfiltering so the two computers =
behind=20
it can still have full access to the internet.<BR><BR>I want to use a=20
192.168.0.x internal network address.<BR><BR>The system is a K62 3D =
with two=20
network cards, a 3com 3c905b, and a netgear FA310Tx card. I have =
access to the=20
internet using the 3com and I've gotten the module support for the =
tulip=20
driver for the other card and set up to use the 192.168.0.x network=20
address.<BR><BR>I use a static IP address setup for eth0 on COX@HOME =
and run a=20
DNS server to be able to lookup names, because I can't get it =
connected to COX=20
any other way without knowing their DNS server addresses. (I lost the =
paper=20
and they don't give them out anymore, they want you to use DHCP which=20
incidentally I can't get to work right either)<BR><BR>Anyways, right =
about=20
here is where I am confused on what to do next to get it to forward =
packets=20
and masquerade or how to configure it as a router of =
anytype.<BR><BR>I'm using=20
Slackware 8.0 with a newly compiled 2.4.5 kernel with support for NAT, =
routing=20
and many other options that I knew I needed in setup.<BR><BR>I've read =
through=20
the many HOWTOs, and other Guides at the LDP website, on routing and =
firewall=20
setup and a lot of it is for Redhat which is enough of a difference to =
confuse=20
me even more.<BR><BR>Does anyone have any knowledge they could pass =
me, have a=20
setup like this yourself that you could share your experiences, or =
just have=20
some advice for me?<BR><BR>oh yeah, I have a hub that I was planning =
on=20
setting up like this:<BR><BR>Two windows 2000 machines going through a =
hub,=20
which connects to the linux machine through an up port which is =
connected to=20
the Cable modem with the other card.<BR><BR>I want to be able to share =
files=20
through the two windows machines, and even networked drives, but not =
with the=20
linux machine at all, just those two machines.<BR><BR>I did not =
install samba=20
support because since this was the case I didn't think it would be=20
needed.<BR><BR>Ok, where do I start?<BR><BR><BR><BR><X-SIGSEP>
<P></X-SIGSEP><FONT=20
=
face=3DVerdana>----------------------------------------------------------=
--------<BR><B>J=20
e f f B a r k e r<BR><BR>Stickboy Productions<BR></B><A=20
href=3D"http://www.stickboyproductions.com/"=20
=
eudora=3D"autourl">http://www.stickboyproductions.com</A><BR>jeff@stickbo=
yproductions.com<BR>home: =20
602.992.4478<BR>work: =20
480.315.4325<BR>fax: =20
=
480.315.4003<BR>---------------------------------------------------------=
---------</FONT>=20
</P></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_0005_01C15F81.5A52A4B0--
--------------InterScan_NT_MIME_Boundary--