improving my Firewall setup. Double firewall?

[shutech]

Currently my firewall setup consists of a cisco router that is managed by the ISP(Nat/firewall/routing). I am thinking about adding a second level and installing a unix box that will takeover the routing and ad a second level firewall and nat.

currently the setup is this.

cisco connected to network 1 that routes traffic to segment 2 of network via a Netware box with 2 nics.

I want to set up a 3 card linux box. card 0 to the cisco box. card 1 to segment 1 and card 2 to segment 2. Then setup nat/firewall between card 0 and card1/2.

Any thoughts?
Michael

 

[iSeriesCodePoet]

What is the purpose of this? To get a DMZ? If so you can build that right into most firewalls.

iSeriesCodePoet
iSeries Programmer/Lawson Software Administrator

See my progress to converting to linux.

http://koldark.hopto.org/linux/

The Programmer's Knowledge Base ->

http://koldark.hopto.org/twiki/bin/view/Programkb/WebHome

 

[shutech]

Purpose was to have some control over my network's security instead of relying totally on the ISP. I have no access to the cisco router at all. I am relying 100% on the ISP for security from the internet to my network.

 

[MattWray]

Sounds like a good idea to me. I've heard good things about SmoothWall.

http://smoothwall.org/

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[iSeriesCodePoet]

IPCop (

http://www.ipcop.org)

does a good job as well. It used to be based off Smoothwall, but now it is it's own.

iSeriesCodePoet
iSeries Programmer/Lawson Software Administrator

See my progress to converting to linux.

http://koldark.hopto.org/linux/

The Programmer's Knowledge Base ->

http://koldark.hopto.org/twiki/bin/view/Programkb/WebHome

 

[bbandolero]

It makes sense.

To learn about Linux Firewalls and IPTables I suggest:

Linux Firewalls
Second Edition
Robert L. Ziegler
ISBN 0-7357-1099-6

Also visit...

http://www.linux-firewall-tools.com/linux

 

[shutech]

Thanks for the response. I didn't know if I was going to get myself into too much with a double firewall.


Michael

 

[diogenes10]

thread83-486570
also contains some firewall discussion