Linux as a firewall 3

[rphips]

I was thinking of setting up a Linux system as a firewall but I don't know too much about it. Does anybody know where I can locate information on how to.

bob

 

[carrr]

http://www.linux-firewall-tools.com/linux/

"'Tis an ill wind that blows no minds." - Malaclypse the Younger

 

[Salem]

There are at least two pre-configured linux systems which provide firewall functionality

http://www.ipcop.org/cgi-bin/twiki/view/IPCop/WebHome

http://www.smoothwall.org/

Any spare pentium class machine (even a really old one) should be all you need to run either of these.

--

 

[netbuster]

Linux is an excellent firewall (trust me i speak from experience.) Despite it being much harder to get past the linux firewall you can enable dynamic i.p.'s so if anyone portscans you, buy the time they even think about trying to get in your server your i.p. will have changed.
I support your move to linux and am sick and tired of windows poor security and horendously overcharged prices.
If you like linux then please buy a copy (if you have the cash of course and are impressed with the service you get from it) as they are extremely cheap.
regards Net_buster

 

[rphips]

well thanks netbuster and if I like it I will sure buy it.

bob

 

[TSMJ]

This may be of interest to you, I was in the same situation a while ago and chose to install Smoothwall - for someone like yourself I could not reccommend a better product - and its feee!

thread83-552072

 

[rphips]

Thanks ISMJ
I will diffently check it out.



bob

Jones' Law
The man who can smile when things go wrong has thought of someone he can blame it on.

 

[iSeriesCodePoet]

I have both built my own and used IPCop. I will tell you what it is a good experience to build you own, but much easier just to use a pre-built one.

iSeriesCodePoet
iSeries Programmer/Lawson Software Administrator

http://www.koldark.net

See my progress to converting to linux.

http://linux.koldark.net

 

[rphips]

Any suggestions on how to build it iseriescodepoet



bob

Jones' Law
The man who can smile when things go wrong has thought of someone he can blame it on.

 

[iSeriesCodePoet]

Read my Linux blog. I have entries on some of the things I have done.

http://linux.koldark.net

I basically used slackware (debian might have been better) then used webmin to set up everything else. The posts start about here (

http://linux.koldark.net/archives/2003_07.html)

and I have a few entries on it. If you have any question feel free to email me. My contact info is on my main blog (

http://www.koldark.net).

iSeriesCodePoet
iSeries Programmer/Lawson Software Administrator

http://www.koldark.net

See my progress to converting to linux.

http://linux.koldark.net

 

[rphips]

will do and thanks ISeriesCodePoet



bob

Jones' Law
The man who can smile when things go wrong has thought of someone he can blame it on.

 

[lullysing]

The evilsmiley.org firewalling box is a ghetto server (p2 220 with 64 megs of ram ) that i simply automated and completely stopped all network accessible services from working on it.

Add a basic firewalling and port forwarding IPTABLES script and you got yourself something that would cost you a bunch of money in a commercial product, that only cost me the price of the ghetto server ( which i found in the trash).

go linux.

_____________________________
when someone asks for your username and password, and much *clickely clickely* is happening in the background, know enough that you should be worried.

 

[borisj]

There is a wide range of Linux firewalls available (as packages for standard distributions or special firewall distributions)

If you are new to Linux you better choose a firewall distribution like... ipcop, astaro secure linux, trustix, or - werewolf from the makers of coyote linux. Werewolf has stateful firewall, VPN capabilities (interoperates with Windows vpn, it is very small...)

 

[iSeriesCodePoet]

Can you point us to where we can fine Werewolf?

iSeriesCodePoet
iSeries Programmer/Lawson Software Administrator

http://www.koldark.net

See my progress to converting to linux.

http://linux.koldark.net

 

[borisj]

ohh, sorry, not werewolf, I mean Wolverine )

http://www.coyotelinux.com/modules.php?name=Products&op=wolverine

 

[SunSt]

I would recommend SmoothWall (

http://www.smoothwall.org);

I have used it for some time now. I am currently using v2 on :
166Mhz Pentium
48Mb RAM
2Gb HDD
2 x NE2000 NICs
All scrap kit thrown out by my employer. It lives up in the attic and I never go near it.

 

[pschwarz]

Does Smooth wall have VPN client software (not "pass through")? Looking for an alternative to Cisco PIX.

 

[Eddiefdz]

You guys should all take a look at m0n0wall.

http://m0n0.ch/wall/

(those are zero's not O's)

I have been using this linux based firewall and it works great. I used to use IPCop but i got tired of having to always edit the Scripts because the WebGui was kinda iffy. This software is all written in PHP and saves all its config files as XML's. You can run it on all sorts of embedded systems as well as an old Pentium class PC. You can even run it with just a bootable cd-rom version of it and a floppy disk, no hd required. No scripts to edit, just create all your firewall rules over the web gui. It has PPTP, IPSEC, all sorts of advanced NAT, wireles support, multiple interfaces. I am telling you this is probably the best software I have seen yet. I have used IPCop, Smoothwall, Mandrake security firwall, and I think monowall beats them all. Take a look at the link and see for yourselfs. If you have any questions let me know I am running this both at the office and at my home.

Regards,

Eddie Fernandez
CCNA, Network+, A+, MCP

 

[azpctech01]

You might take a gander at

http://www.freesco.org

I set one up on a old pc last week..worked real well

 

[dilettante]

You might also consider OpenBSD for this role in your network.

Less "lard" than Linux, and inherently more secure. At the same time, those accustomed to Linux may find it a reasonably familiar place to be.

Using OpenBSD 3.3 As A Firewall/Gateway for Home DSL or Cable and many others.

Try Google: [tt]openbsd firewall[/tt]