[Ham-Linux] firewall/router

[Mike McCarthy, W1NR]

You might want to try SuSE with "minimal Graphical installation" selected.
SuSE Firewall 2 has a very friendly configuration front end for the kernel
IPTABLES firewall.

You need to configure a WAN port and a LAN port.  One will connect to your
ISP and the internet and the other will be your LAN.  These need to be on
different IP subnets.  Usually, you set the LAN at 192.168.1.1/255.255.255.0
(this is a private address block) and the WAN interface to what your ISP
wants.  Routing needs to be enabled as well as "Masquerading".  There are a
whole bunch of How-to's on the subject.  Just Google for Masquerading how-to
and routing how-to.  That should get you started.

It is a time consuming task but well worth it.

Mike, W1NR
 

-----Original Message-----
From: ham-linux-bounces at mailman.qth.net
[mailto:ham-linux-bounces at mailman.qth.net] On Behalf Of fkamp at comcast.net
Sent: Sunday, November 13, 2005 10:38 AM
To: Jonathan Thawley, KC8CPW
Cc: Ham-Linux
Subject: Re: [Ham-Linux] firewall/router

Jonathan Thawley, KC8CPW wrote:
>  
> I'm trying to setup my linux box to be my firewall and router...  I do 
> have
> 2 NICs installed....  
>  
> specifically which programs do I need to use to bridge those 2 NIC 
> cards together so that I can access the internet
>  
> I believe that I also need the DHCP server or something like that
running...
> what is the correct service name for that tool??
>  
> also, I need to know how to open up specific ports, such as those for 
> EchoLink, etc, etc...
>  
> I also have SeLinux installed (I think that's what it's called) not 
> sure what to do with it...
>  
> I'm using TAO LINUX.... www.taolinux.org  it's based off of red hat....
>  
> and ideas or suggestions are appreciated.
>  

Do a search on Linux LRP.

The Linux Router Project used to be pretty active.  It has been a while
since it has been updated.  That is probably a good thing implying the
software works and is stable.

Try one of the canned images.  Dachstein works for me.

If you dont like LRP, you can use it to learn how to build your own setup.
Either way you could save yourself some time.

Regards,
Frank Kamp
_______________________________________________
Ham-Linux mailing list
Ham-Linux at mailman.qth.net
http://mailman.qth.net/mailman/listinfo/ham-linux