Re: [expert] Proxy/router setup How-To

2000-08-28 Thread Daniel Woods

> Just want to know of a good resource on setting up a proxy server/router
> using linux. What I want to do is have 1 machine for my proxy that also
> provides my internet connection to 3 other boxes. The 3 machines also need
> to be able to transfer data between themselves. The box I want to use is a
> P133Mhz machine w/32Mb, 4 NIC's (1 in/3 out), and Mandrake 7.0

No need for 3 out, that's what a hub or switch is used for.
A better suggestion would be to have 1 in / 1 out. Your ISP connection
is going to the 'in', and your 'out' (LAN) goes to the hub/switch,
and then all your other PCs would connect to the hub/switch instead
of your proxy computer.

With this scenario, you could use PMFirewall suggested by others, which
uses ipchains to setup the proxying.

Thanks... Dan.






Re: [expert] Proxy/router setup How-To

2000-08-28 Thread Dave Lers

On Mon, 28 Aug 2000, Benjamin Reed wrote:
> > Try doing a web search on PMFirewall. I use it myself and it is great!
> > It's also really easy to set up, and easy to customise if you know
> > what you're doing with ports & packet filtering. Sorry I can't
> > remember the URL at the moment.
> 
> George, while I love PMFirewall (it's what I use at home) you may have a
> little trouble with it.  Last I used it, it only checks for an "external"
> interface, and an "internal" interface.  Since it's going to be acting as a
> switch instead of a router (1 NIC card for each machine it's connecting to)
> there will be 3 internals.  PMFirewall doesn't think in terms of multiple
> internal network interfaces.
> 
> It's probably not too difficult to hack in, but you may have better luck
> with something else that can do what you want out of the box.

It's not quite what he want's but this 3-way firewall script might
provide ideas.
http://www.jasmine.org.uk/~simon/bookshelf/papers/instant-firewall/instant-firewall.html




Re: [expert] Proxy/router setup How-To

2000-08-28 Thread Benjamin Reed

> If u want 1 NIC on Linux per client PC, do u need special
> "straight thru" cat5, in order to run wire diectly from the
> client to the Linux box?  Otherwise, wouldn't u need a hub
> NIC on your linux box?


Yup, you'd need a "crossover" cable, with the RX and TX switched.  Basically
the ethernet equivalent of a null modem cable.  :)

--
Ben Reed ([EMAIL PROTECTED])
http://defiance.dyndns.org/
Fight the InterNIC!  http://www.opennic.unrated.net/





Re: [expert] Proxy/router setup How-To

2000-08-28 Thread Ron Johnson, Jr.

Benjamin Reed wrote:
> 
> > While the thought of buying another piece isn't too appealing to me
> > (I have a mylar bag with about 10 NIC's in it already) it looks like
> 
> I don't know if you really need to get new hardware just for this if you've
> already got the NICs, you'll just have to spend a little time (probably)
> learning IPChains.  There are very few ipchains "wrappers" that handle more
> than one internal NIC (that I know of), and unless you want to fork out the
> money for a switch instead of a hub, you'll probably get better performance
> with multiple NICs.  :)

If u want 1 NIC on Linux per client PC, do u need special 
"straight thru" cat5, in order to run wire diectly from the
client to the Linux box?  Otherwise, wouldn't u need a hub
NIC on your linux box?

Ron
-- 
+--+
| Ron Johnson, Jr.Home: [EMAIL PROTECTED]   |
| Jefferson, LA  USA  WWW : [EMAIL PROTECTED] |
|  |
| Most overused words: feel, cool/kewl, fun, myBlah.com|
| Most underused word: think   |
+--+




Re: [expert] Proxy/router setup How-To

2000-08-28 Thread george . jones


Yeah, I've already used FreeSCO. That's more of what I was looking for, but
I was thinking that I might want to do a bit of web browsing from that
machine. Also, FreeSCO only allows me to hook up 2 pc's directly. I do have
a coupla hubs, but I really don't want to use them anymore. I'm trying to
graduate to something better.




"Benjamin Reed" <[EMAIL PROTECTED]>@linux-mandrake.com on 08/28/2000
11:34:36 AM

Please respond to [EMAIL PROTECTED]

Sent by:  [EMAIL PROTECTED]


To:   <[EMAIL PROTECTED]>
cc:
Subject:  Re: [expert] Proxy/router setup How-To


> While the thought of buying another piece isn't too appealing to me
> (I have a mylar bag with about 10 NIC's in it already) it looks like

I don't know if you really need to get new hardware just for this if you've
already got the NICs, you'll just have to spend a little time (probably)
learning IPChains.  There are very few ipchains "wrappers" that handle more
than one internal NIC (that I know of), and unless you want to fork out the
money for a switch instead of a hub, you'll probably get better performance
with multiple NICs.  :)

Now I know this is blasphemy here on the mandrake list, but you may want to
check out one of the router-on-a-floppy distributions (LRP/Coyote Linux,
FREESCO, etc.) and see if that works better for you, too.  And hey, if it
does work, you can always rip apart the floppy distro's set up and see how
they set up IPChains.  ;)

--
Ben Reed ([EMAIL PROTECTED])
http://defiance.dyndns.org/
Fight the InterNIC!  http://www.opennic.unrated.net/









Re: [expert] Proxy/router setup How-To

2000-08-28 Thread Benjamin Reed

> While the thought of buying another piece isn't too appealing to me
> (I have a mylar bag with about 10 NIC's in it already) it looks like

I don't know if you really need to get new hardware just for this if you've
already got the NICs, you'll just have to spend a little time (probably)
learning IPChains.  There are very few ipchains "wrappers" that handle more
than one internal NIC (that I know of), and unless you want to fork out the
money for a switch instead of a hub, you'll probably get better performance
with multiple NICs.  :)

Now I know this is blasphemy here on the mandrake list, but you may want to
check out one of the router-on-a-floppy distributions (LRP/Coyote Linux,
FREESCO, etc.) and see if that works better for you, too.  And hey, if it
does work, you can always rip apart the floppy distro's set up and see how
they set up IPChains.  ;)

--
Ben Reed ([EMAIL PROTECTED])
http://defiance.dyndns.org/
Fight the InterNIC!  http://www.opennic.unrated.net/





Re: [expert] Proxy/router setup How-To

2000-08-28 Thread Benjamin Reed

> Why not just use ipcahins? I have written a couple of scripts


PMFirewall is a set of scripts for automatically setting up ipchains rules.
It asks simple questions (what is your external interface, do you have a
telnet server, do you have an FTP server) and builds the rules for you.

So it *is* ipchains.  :)

--
Ben Reed ([EMAIL PROTECTED])
http://defiance.dyndns.org/
Fight the InterNIC!  http://www.opennic.unrated.net/





Re: [expert] Proxy/router setup How-To

2000-08-28 Thread george . jones


While the thought of buying another piece isn't too appealing to me (I have
a mylar bag with about 10 NIC's in it already) it looks like I might just
need to buy a switch and remove 2 NIC's. PMFirewall might be the answer.
Any other suggestions?




"Benjamin Reed" <[EMAIL PROTECTED]>@linux-mandrake.com on 08/28/2000
10:27:26 AM

Please respond to [EMAIL PROTECTED]

Sent by:  [EMAIL PROTECTED]


To:   <[EMAIL PROTECTED]>
cc:
Subject:  Re: [expert] Proxy/router setup How-To


> Try doing a web search on PMFirewall. I use it myself and it is great!
> It's also really easy to set up, and easy to customise if you know
> what you're doing with ports & packet filtering. Sorry I can't
> remember the URL at the moment.

George, while I love PMFirewall (it's what I use at home) you may have a
little trouble with it.  Last I used it, it only checks for an "external"
interface, and an "internal" interface.  Since it's going to be acting as a
switch instead of a router (1 NIC card for each machine it's connecting to)
there will be 3 internals.  PMFirewall doesn't think in terms of multiple
internal network interfaces.

It's probably not too difficult to hack in, but you may have better luck
with something else that can do what you want out of the box.

If you weren't trying to do it exactly as you're doing it, I'd say use
PMFirewall.  Personally, I've never tried to set up a switch-style linux
router, so in my case, PMFirewall rocks!  :)

--
Ben Reed ([EMAIL PROTECTED])
http://defiance.dyndns.org/
Fight the InterNIC!  http://www.opennic.unrated.net/









RE: [expert] Proxy/router setup How-To

2000-08-28 Thread Eric Peters

Why not just use ipcahins? I have written a couple of scripts for
this purpose I will post them as soon as I find them again :) also if you go
to freshmeat.net and do a search for ipcahins scripts
http://freshmeat.net/search/?q=ipchains+script You will find what you are
looking for. There is even a very nice webmin module for ipcahins that makes
setting up your own rules a snap.
http://www.niemueller.de/webmin/modules/ipchains/

Hope this helps :) again I will post my proxy scripts as soon as I find
them. I really should keep myself more organized.

Cheers,
---
Eric Peters Mail:[EMAIL PROTECTED]
System Administrator Network Operations
Inherent Technologies Inc. 
office (503)224-6751 ext 224
---



-Original Message-
From: Chris Slater-Walker [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 28, 2000 7:06 AM
To: [EMAIL PROTECTED]
Subject: Re: [expert] Proxy/router setup How-To


Try doing a web search on PMFirewall. I use it myself and it is great! It's
also really easy to set up, and easy to customise if you know what you're
doing with ports & packet filtering. Sorry I can't remember the URL at the
moment.

Chris


- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, August 28, 2000 2:16 PM
Subject: [expert] Proxy/router setup How-To


> Just want to know of a good resource on setting up a proxy server/router
> using linux. What I want to do is have 1 machine for my proxy that also
> provides my internet connection to 3 other boxes. The 3 machines also need
> to be able to transfer data between themselves. The box I want to use is a
> P133Mhz machine w/32Mb, 4 NIC's (1 in/3 out), and Mandrake 7.0
>
>
>





Re: [expert] Proxy/router setup How-To

2000-08-28 Thread Benjamin Reed

> Try doing a web search on PMFirewall. I use it myself and it is great!
> It's also really easy to set up, and easy to customise if you know
> what you're doing with ports & packet filtering. Sorry I can't
> remember the URL at the moment.

George, while I love PMFirewall (it's what I use at home) you may have a
little trouble with it.  Last I used it, it only checks for an "external"
interface, and an "internal" interface.  Since it's going to be acting as a
switch instead of a router (1 NIC card for each machine it's connecting to)
there will be 3 internals.  PMFirewall doesn't think in terms of multiple
internal network interfaces.

It's probably not too difficult to hack in, but you may have better luck
with something else that can do what you want out of the box.

If you weren't trying to do it exactly as you're doing it, I'd say use
PMFirewall.  Personally, I've never tried to set up a switch-style linux
router, so in my case, PMFirewall rocks!  :)

--
Ben Reed ([EMAIL PROTECTED])
http://defiance.dyndns.org/
Fight the InterNIC!  http://www.opennic.unrated.net/





Re: [expert] Proxy/router setup How-To

2000-08-28 Thread Chris Slater-Walker

Try doing a web search on PMFirewall. I use it myself and it is great! It's
also really easy to set up, and easy to customise if you know what you're
doing with ports & packet filtering. Sorry I can't remember the URL at the
moment.

Chris


- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, August 28, 2000 2:16 PM
Subject: [expert] Proxy/router setup How-To


> Just want to know of a good resource on setting up a proxy server/router
> using linux. What I want to do is have 1 machine for my proxy that also
> provides my internet connection to 3 other boxes. The 3 machines also need
> to be able to transfer data between themselves. The box I want to use is a
> P133Mhz machine w/32Mb, 4 NIC's (1 in/3 out), and Mandrake 7.0
>
>
>





[expert] Proxy/router setup How-To

2000-08-28 Thread george . jones

Just want to know of a good resource on setting up a proxy server/router
using linux. What I want to do is have 1 machine for my proxy that also
provides my internet connection to 3 other boxes. The 3 machines also need
to be able to transfer data between themselves. The box I want to use is a
P133Mhz machine w/32Mb, 4 NIC's (1 in/3 out), and Mandrake 7.0