Mandrake 8.0 Single Network Firewall 1

[jrjuiliano]

Was just wondering if anyone had any opinions regarding Linux Mandrake's Single Network Firewall.

I downloaded it and played for a while, but still haven't had the chance to make it work (I'm a Linux Newbie).

Thanks. J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

 

[iSeriesCodePoet]

Haven't gotten a chance to check it out yet...will let you know once I have it set up... Mike Wills
RPG Programmer

"I am bad at math because God forgot to include math.h into my programming!"

Please let us (Tek-Tips members) know if the solutions I provide are helpful to you. Not only do my posts help you but they may help others.

 

[jrjuiliano]

Thanks! I'd appreciate it.
J.R. J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

 

[johnhoke]

I have played with it a bit...

If you have a really simple network (hense the name) it is not bad... ipchains essentially...

Caveat: if you have more than say 1 of any service in a DMZ dont go there....

-John ---
John Hoke

 

[jrjuiliano]

Thanks for the review! I suppose I'll be looking into something more robust, unless I'm going to use this on a home network.
J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

 

[johnhoke]

jr...

Best bet is to get an old pentium box, install debian or redhat, with a 2.4 kernel, configure iptables and viola

-John ---
John Hoke

 

[tjv]

Absolutely horrible...I had it install once and working except for the filtering and tried to install it again and guess what no worky. I used the same configuration and it will not work.

 

[iSeriesCodePoet]

tjv
How much expirience do you have in Linux? Mike Wills
RPG Programmer

"I am bad at math because God forgot to include math.h into my programming!"

Please let us (Tek-Tips members) know if the solutions I provide are helpful to you. Not only do my posts help you but they may help others.

 

[ifincham]

Hi,

In case you don't know, Suse have recently released a similar firewall-distro -->

http://www.suse.com/us/products/bizprod/SuSE_Linux_Firewall/index.html

.

Maybe a better idea is to use a standard disro and harden it using the bastille linux code -->

http://www.bastille-linux.org/

. Bastille linux started out life as a firewall-distro but more recently has been re-oriented as a way of strenthening security on Redhat/Mandrake systems.

Rgds

 

[tjv]

Koldark,

I've used linux for a few years now and understand fully how to configure a linux system. What I am saying is that I personally feel that this product is not ready to be shipped. I ended up trying Smoothwall and it is working perfectly on the first install. I am impressed.

Thanks

 

[iSeriesCodePoet]

...Well I just downloaded it, I will check it out. Mike Wills
RPG Programmer (but learning Java)

"I am bad at math because God forgot to include math.h into my program!"

 

[jrjuiliano]

Hi all,

I tried Smoothwall as well, and even though it was pretty well laid out I couldn't get it to work (and I was impatient anyway).

But from what I understand it's a good distro to use. The only thing I can recommend is that you don't use the same brand / model of NIC card for detection. For some reason the copy I downloaded didn't want to recognize two of the same card.
J.R. J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

 

[tjv]

jrjuiliano,

I used the same NIC's Intel Etherexpress pro 100's and it detected both. Intially it will only see on NIC then you have to select what type of connection to use Green + red and so on. After that you have to setup the green interface separately. Just a thought.

tjv