At 11:09 AM 11/29/2004 -0800, Arnold Wiegert wrote:
I am trying to find a way to test my local firewall setup locally, i.e. without having to have someone else test it for me.

Doing this sort of right is trickier than you realize. Your firewall's setup includes an external connection of unspecified type, and some types (e.g., PPPoE) will work ONLY to connect the router to the external gatrway, not to any local address of the sort you describe. Also, Dach configurations typically include rules that block external traffic to and from "subnet 10" addresses, a generic nickname for the RFC1918 "non-routable" address blocks such as 10.b.c.d/8. So it is unlikely that you can do a test with a "faked" external network unless you modify your router setup ... and then you aren't testing the existing setup any more.


If I really need to do this sort of test, then I would do a benchtop test that invloved two "LANs" connected to Dach (or other) routers, plus another router to simulate "the Internet". If you really want to do this, post again and I'll describe what I'm thinking of in more detail ... but I suspect you will see this as too much work for realistic consideration.

If your ISP includes a dial-up connection as part of your package, I'd suggest using it is the best way to run a test. Set up your Dach'd LAN to do whatever you want to test, then dial in (from a workstation or another router, depending on undescribed details of what you want to test) and do your tests.

Alternately (I've done this too), you can do a test to a true remote site and watch both ends of it. For this to work, you need a host at the remote end that you can ssh to, and appropriate privileges on any relevant LAN hosts, including the route, at that end. The details depend on what service you plan to use to accomplish the transfers.

Both these approaches have the additional feature of testing other possible problems, such as slow transfer speed (if your uplink bandwidth is low, as, for instance, ADSL usually is) and the possibility that your ISP is deliberately interfering with whatever service you are trying to use. Depending on what you actually want to test, this feature can be either desirable or undesirable, of course.

Finally, and more generally, I think you would get better help from this list if you were a bit less parsimonious with details. My responses, to both this and your prior "large files" query, are full of guesses and maybes, simply because I don't underatand what you want to try. I would be able to give you better advice, for less effort, if you took the time to provide a more complete description ... I'm sure I am not alone in this.

The main areas I wanted to test was a setup for large file transfers between myself and a second user. This second user (my sister) would not have much IT training, so it seems easier to do it all locally, rather than trying to talk someone else through all the steps over the phone. As well, it is a lot easier than tying up two people, especially for those debug sessions ;-)

I'm particularly interested in what hardware setup I need.

My current setup is a very basic firewall running Dachstein on a 486 with two nics at the end of a ADSL link from my local phone company.

My LAN consists of a couple of WinXX machines and a linux box.

My current thoughts were to use an auxiliary 4-port hub to hook up a spare machine on the outside of my network as the 'remote' end of my test setup. This machine could be running either a Winxx or linux OS. I was thinking of giving it some IP address 10.xx.xx.xx.

As this would be a very temporary setup, I'm not expecting it to critical, particularly since I only expect to run it when I'm present and monitoring it - although any extra traffic might be distracting or even misleading - especially at first. In fact, I was contemplating adding a sniffer at the outside hub, to make it easier to decide what came from where.

All my googling so far has not found anything that answers my question either way, so any suggestions or pointers will be most welcome.







-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to