Re: Can we run a qemu instance as a dedicated home network firewall?

2008-03-31 Thread T o n g
On Sun, 30 Mar 2008 11:20:26 -0400, Mitchell Laks wrote: > Can we use a virtual qemu linux machine as a firewall for > a real home network? > > I have a small network at home, with a few desktops and a DMZ and > a linux firewall machine. > > Now that virtualization is wor

Re: Can we run a qemu instance as a dedicated home network firewall?

2008-03-30 Thread Mitchell Laks
On 14:04 Sun 30 Mar , Douglas A. Tutty wrote: > On Sun, Mar 30, 2008 at 11:20:26AM -0400, Mitchell Laks wrote: > > Can we use a virtual qemu linux machine as a firewall for > > a real home network? > > Well, on normal i386 hardware (unlike e.g. Zseries with LPARs), >

Re: Can we run a qemu instance as a dedicated home network firewall?

2008-03-30 Thread Douglas A. Tutty
On Sun, Mar 30, 2008 at 11:20:26AM -0400, Mitchell Laks wrote: > Can we use a virtual qemu linux machine as a firewall for > a real home network? Well, on normal i386 hardware (unlike e.g. Zseries with LPARs), virtualization doesn't gain you any security really. Think of it this wa

Can we run a qemu instance as a dedicated home network firewall?

2008-03-30 Thread Mitchell Laks
Can we use a virtual qemu linux machine as a firewall for a real home network? I have a small network at home, with a few desktops and a DMZ and a linux firewall machine. Now that virtualization is working for me, via qemu, I would like to get rid of all the old equipment that I use for little

Re: firewall problems killing tomcat and apache

2008-03-16 Thread Adam Hardy
e DSL modem. It's got dnsmasq and iptables. I'm saying that because I think it's the firewall causing the problem, but I don't know for sure or why. I am trying to run apache and tomcat servers to serve content and apps for the internal LAN, and not externally. Apache runs

Re: firewall problems killing tomcat and apache

2008-03-15 Thread Mumia W..
d iptables. I'm saying that because I think it's the firewall causing the problem, but I don't know for sure or why. I am trying to run apache and tomcat servers to serve content and apps for the internal LAN, and not externally. Apache runs fine, but tomcat is very slow to load (3

Re: firewall problems killing tomcat and apache

2008-03-15 Thread Adam Hardy
think it's the firewall causing the problem, but I don't know for sure or why. I am trying to run apache and tomcat servers to serve content and apps for the internal LAN, and not externally. Apache runs fine, but tomcat is very slow to load (3 mins) when it should be 1 or 2 seconds. I

Re: firewall problems killing tomcat and apache

2008-03-14 Thread Mumia W..
On 03/14/2008 07:22 AM, Adam Hardy wrote: I'm setting up a server which is a DNS server and broadband gateway for a small LAN, having two NICs with one connected to the DSL modem. It's got dnsmasq and iptables. I'm saying that because I think it's the firewall causin

firewall problems killing tomcat and apache

2008-03-14 Thread Adam Hardy
I'm setting up a server which is a DNS server and broadband gateway for a small LAN, having two NICs with one connected to the DSL modem. It's got dnsmasq and iptables. I'm saying that because I think it's the firewall causing the problem, but I don't know for sure

Re: firewall or securety software

2008-02-28 Thread Michelle Konzack
Am 2008-02-24 14:24:12, schrieb steef: > got a working firewall in my router plus shorewall installed and > working. on my machine together no problem at all. why? the more > security the better i guess. hope this guess is right. BTW i was under > attack about a year ago. thi

Re: firewall or securety software

2008-02-24 Thread Douglas A. Tutty
On Sun, Feb 24, 2008 at 06:31:08AM -0500, Haines Brown wrote: > I hope I may be allowed to expand a bit on the OP's question. > > What are the advantages of a hardware firewall over a firewall built > into a router? > > Can one use both, or should the firewall in a rout

Re: firewall or securety software

2008-02-24 Thread Douglas A. Tutty
On Sun, Feb 24, 2008 at 06:11:17PM +1100, Daniel Dalton wrote: > Do I need any securety or firewalls on my debian box? > I am going through a router. > > If I do what command line firewall or securety software can I use? It depends. Do you have anything set to listen on outsid

Re: firewall or securety software

2008-02-24 Thread steef
Haines Brown wrote: I hope I may be allowed to expand a bit on the OP's question. What are the advantages of a hardware firewall over a firewall built into a router? Can one use both, or should the firewall in a router be disabled if there is a hardware firewall? If the OP finds th

Re: firewall or securety software

2008-02-24 Thread Haines Brown
I hope I may be allowed to expand a bit on the OP's question. What are the advantages of a hardware firewall over a firewall built into a router? Can one use both, or should the firewall in a router be disabled if there is a hardware firewall? If the OP finds that he has a firewall i

Re: firewall or securety software

2008-02-24 Thread Andrei Popescu
On Sun, Feb 24, 2008 at 06:11:17PM +1100, Daniel Dalton wrote: > Hi, > > Do I need any securety or firewalls on my debian box? > I am going through a router. Many routers have integrated firewall. Does yours? > If I do what command line firewall or securety software can I

firewall or securety software

2008-02-23 Thread Daniel Dalton
Hi, Do I need any securety or firewalls on my debian box? I am going through a router. If I do what command line firewall or securety software can I use? Thanks, -- Daniel Dalton http://members.iinet.net.au/~ddalton/ [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a

Re: Firewall suggestions?

2008-02-18 Thread Sean
SafeSquid - Content Filtering Internet Proxy (http:// www.safesquid.com/) ? (No, it is not built on Squid-cache) Proxy + cache + application layer firewall + built-in connectivity to ClamAV daemon Description - http://www.safesquid.com/html/portal.php?page=105 Using ClamAV - http

Re: Firewall suggestions?

2008-02-16 Thread Siraaj Khandkar
On 2008-02-13 06:27:56 -0900, "Dennis G. Wicks" <[EMAIL PROTECTED]> said: > Greetings! > > It seems the time has come to build a dedicated > firewall machine for myself. The win 2k machine I have > been using is getting too flaky. > > I have a P-II HP box tha

Re: Firewall suggestions?

2008-02-14 Thread Dennis G. Wicks
Andrei Popescu wrote the following on 02/14/2008 06:24 AM: > On Thu, Feb 14, 2008 at 03:52:42AM +0200, Georgi Naplatanov wrote: > >> Is combination (proxy and anti-virus) reliable enough for other programs >> except web browsers and ftp clients ? >> >> I mean programs such as instant messengers f

Re: Firewall suggestions?

2008-02-14 Thread Andrei Popescu
On Thu, Feb 14, 2008 at 03:52:42AM +0200, Georgi Naplatanov wrote: > Is combination (proxy and anti-virus) reliable enough for other programs > except web browsers and ftp clients ? > > I mean programs such as instant messengers for example. ... and torrents. Regards, Andrei -- If you can't ex

Re: Firewall suggestions?

2008-02-13 Thread Jaime Tarrant
Georgi Naplatanov wrote: Dennis G. Wicks wrote: Georgi Naplatanov wrote the following on 02/13/2008 10:44 AM: Ipcop is a good choice too, but i can not understand why you need antivirus on firewall/router machine. http://ipcop.org/ Regards Georgi I need anti-virus because I have five

Re: Firewall suggestions?

2008-02-13 Thread Georgi Naplatanov
Dennis G. Wicks wrote: Georgi Naplatanov wrote the following on 02/13/2008 10:44 AM: Ipcop is a good choice too, but i can not understand why you need antivirus on firewall/router machine. http://ipcop.org/ Regards Georgi I need anti-virus because I have five (today) Windows systems behind

Re: Firewall suggestions?

2008-02-13 Thread Dennis G. Wicks
Georgi Naplatanov wrote the following on 02/13/2008 10:44 AM: > Ipcop is a good choice too, but i can not understand why you need > antivirus on firewall/router machine. > > http://ipcop.org/ > > Regards > Georgi I need anti-virus because I have five (today) Windows system

Re: Firewall suggestions?

2008-02-13 Thread Andre Luiz Rodrigues Ferreira
2008/2/13, Georgi Naplatanov <[EMAIL PROTECTED]>: > Ipcop is a good choice too, but i can not understand why you need > antivirus on firewall/router machine. Security Gateway ? > > http://ipcop.org/ > > Regards > Georgi > > Dennis G. Wicks wrote: > > Greeti

Re: Firewall suggestions?

2008-02-13 Thread Georgi Naplatanov
Ipcop is a good choice too, but i can not understand why you need antivirus on firewall/router machine. http://ipcop.org/ Regards Georgi Dennis G. Wicks wrote: Greetings! It seems the time has come to build a dedicated firewall machine for myself. The win 2k machine I have been using is

Re: Firewall suggestions?

2008-02-13 Thread Sudev Barar
On 13/02/2008, Dennis G. Wicks <[EMAIL PROTECTED]> wrote: > Greetings! > > It seems the time has come to build a dedicated > firewall machine for myself. The win 2k machine I have > been using is getting too flaky. Not tried this but http://www.untangle.com looks very inte

Re: Firewall suggestions?

2008-02-13 Thread Matthew Macdonald-Wallace
On Wed, 13 Feb 2008 15:45:48 + Matthew Macdonald-Wallace <[EMAIL PROTECTED]> wrote: > On Wed, 13 Feb 2008 09:27:56 -0600 > "Dennis G. Wicks" <[EMAIL PROTECTED]> wrote: > > > Greetings! > > > > It seems the time has come to build a dedicated &g

Re: Firewall suggestions?

2008-02-13 Thread Neil Watson
Astaro Linux may still offer free home use licenses. -- Neil Watson System Administrator for hire http://watson-wilson.ca -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Firewall suggestions?

2008-02-13 Thread Matthew Macdonald-Wallace
On Wed, 13 Feb 2008 09:27:56 -0600 "Dennis G. Wicks" <[EMAIL PROTECTED]> wrote: > Greetings! > > It seems the time has come to build a dedicated > firewall machine for myself. The win 2k machine I have > been using is getting too flaky. > > I have a P-II HP

Re: Firewall suggestions?

2008-02-13 Thread Schiz0
On Feb 13, 2008 10:27 AM, Dennis G. Wicks <[EMAIL PROTECTED]> wrote: > Greetings! > > It seems the time has come to build a dedicated > firewall machine for myself. The win 2k machine I have > been using is getting too flaky. > > I have a P-II HP box that was a pret

Firewall suggestions?

2008-02-13 Thread Dennis G. Wicks
Greetings! It seems the time has come to build a dedicated firewall machine for myself. The win 2k machine I have been using is getting too flaky. I have a P-II HP box that was a pretty solid performer that I think will do for the hardware. (Agree/disagree?) I need some suggestions for the

Re: PII fast enough for firewall

2007-12-22 Thread John Schmidt
On Sunday 02 December 2007, John Schmidt wrote: > Hi, > > I have a 15K Mbs connection (up/down) to my house (fiber to the home). > > I have a Buffalo router that connects to my WAN and then one of the LAN > ports on this router connects to my IPCOP firewall that is running on

Re: PII fast enough for firewall

2007-12-04 Thread David Brodbeck
On Dec 4, 2007, at 6:18 AM, Douglas A. Tutty wrote: Or OpenBSD. Has a much smaller memory footprint (means less swapping) than linux and perhaps faster as well. Also, since its a firewall, OpenBSD is supposed to be the most secure firewall to which regular people have access. I also found

Re: PII fast enough for firewall

2007-12-04 Thread John Hasler
Doug writes: > ...OpenBSD is supposed to be the most secure firewall to which regular > people have access. It's also probably the most secure firewall to which regular people don't have access. -- John Hasler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Re: PII fast enough for firewall

2007-12-04 Thread Douglas A. Tutty
ffalo router that connects to my WAN and then one of the > >>LAN ports on this router connects to my IPCOP firewall that is > >>running on a PII -- 400 MHz box with 64 MB of RAM. > >> > >>When I do a speed test from my box behind my IPCOP firewall, I get > >

Re: "link up" (was Re: PII fast enough for firewall)

2007-12-03 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/03/07 16:59, David Brodbeck wrote: > > On Dec 3, 2007, at 2:39 PM, Ron Johnson wrote: > >> >> On 12/03/07 16:11, Ralph Katz wrote: >> [snip] >>> >>> Maybe check your NIC. What do you get for this (etch): >>> $ grep 'link up' /var/log/dmesg >>>

Re: "link up" (was Re: PII fast enough for firewall)

2007-12-03 Thread David Brodbeck
On Dec 3, 2007, at 2:39 PM, Ron Johnson wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/03/07 16:11, Ralph Katz wrote: [snip] Maybe check your NIC. What do you get for this (etch): $ grep 'link up' /var/log/dmesg Maybe the ancient PII has an ancient ethernet card! My (just pur

"link up" (was Re: PII fast enough for firewall)

2007-12-03 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/03/07 16:11, Ralph Katz wrote: [snip] > > Maybe check your NIC. What do you get for this (etch): > $ grep 'link up' /var/log/dmesg > > Maybe the ancient PII has an ancient ethernet card! My (just purchased) system running kernel 2.6.22 descri

Re: PII fast enough for firewall

2007-12-03 Thread David Brodbeck
On Dec 2, 2007, at 8:22 PM, John Schmidt wrote: Hi, I have a 15K Mbs connection (up/down) to my house (fiber to the home). I have a Buffalo router that connects to my WAN and then one of the LAN ports on this router connects to my IPCOP firewall that is running on a PII -- 400 MHz box

Re: PII fast enough for firewall

2007-12-03 Thread Ralph Katz
On 12/03/2007 02:03 PM, Peter Teunissen wrote: > > On 3-dec-2007, at 7:25, Ron Johnson wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> On 12/02/07 22:22, John Schmidt wrote: >>> When I do a speed test from my box behind my IPCOP fir

Re: PII fast enough for firewall

2007-12-03 Thread Peter Teunissen
this router connects to my IPCOP firewall that is running on a PII -- 400 MHz box with 64 MB of RAM. When I do a speed test from my box behind my IPCOP firewall, I get about 10K Mbs up/down. If I move the connection to one of the Buffalo router LAN connections, I get the advertised 15K Mbs

Re: PII fast enough for firewall

2007-12-03 Thread John Schmidt
On Sunday 02 December 2007, Andrei Popescu wrote: > On Sun, Dec 02, 2007 at 09:22:44PM -0700, John Schmidt wrote: > > Hi, > > > > I have a 15K Mbs connection (up/down) to my house (fiber to the home). > > ---^^^ > I've never seen this. Do you mean 15 Gbps or what? > > Regards, > Andrei

Re: PII fast enough for firewall

2007-12-02 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/02/07 22:22, John Schmidt wrote: > Hi, > > I have a 15K Mbs connection (up/down) to my house (fiber to the home). > > I have a Buffalo router that connects to my WAN and then one of the LAN ports > on this router connects to

Re: PII fast enough for firewall

2007-12-02 Thread Andrei Popescu
On Sun, Dec 02, 2007 at 09:22:44PM -0700, John Schmidt wrote: > Hi, > > I have a 15K Mbs connection (up/down) to my house (fiber to the home). ---^^^ I've never seen this. Do you mean 15 Gbps or what? Regards, Andrei -- If you can't explain it simply, you don't understand it well eno

PII fast enough for firewall

2007-12-02 Thread John Schmidt
Hi, I have a 15K Mbs connection (up/down) to my house (fiber to the home). I have a Buffalo router that connects to my WAN and then one of the LAN ports on this router connects to my IPCOP firewall that is running on a PII -- 400 MHz box with 64 MB of RAM. When I do a speed test from my box

amsn, gspca and firewall problems

2007-11-19 Thread gusti
Hello I reinstall Debian again before few weeks ago. Now I can't use the webcam with the amsn program. I'm using Debian stable with kernel 2.6.18-5-686 and gspca-modules-2.6.18-5-686 and my camera is Creative Notebook PD1171. With the mplayer software I can player video: > mplayer tv:// -t

Re: V?: home network behind a firewall/router

2007-11-05 Thread Pál Csányi
2007/11/5, Douglas A. Tutty <[EMAIL PROTECTED]>: > > > Is shorewall masquerading for you? > > > > No, I have not a public IP address yet, so I don't need it. > > Yes, you do. You have three networks: 192.168.1.0, 192.168.2.0, and > 10.91.0.0. The cable modem will route from the 10.91.0.0 but won

Re: V?: home network behind a firewall/router

2007-11-05 Thread Douglas A. Tutty
my ISP >| > Cable Modem connection to my ISP >| > eth3 >get an IP address > from dhcp server of my ISP >10.91.0.xxx >| > PC box-1 firewall/gateway >

Vá: home network behind a firewall/router

2007-11-04 Thread Pál Csányi
eth3 get an IP address from dhcp server of my ISP 10.91.0.xxx | PC box-1 firewall/gateway = eth1eth2 192.168.1.1 192.168.2.1 | |

Vá: home network behind a firewall/router

2007-11-04 Thread Pál Csányi
2007/11/4, Raj Kiran Grandhi <[EMAIL PROTECTED]>: > > You did enable IP masquerading on your gateway machine, didn't you? No, I did not. > Also output of "iptaples --list" on your gateway Chain INPUT (policy DROP) target prot opt source destination ACCEPT 0-- anywhere

Re: firewall installation question

2007-11-03 Thread Paul E Condon
On Sun, Nov 04, 2007 at 01:53:57AM +, Steve Kemp wrote: > On Sat Nov 03, 2007 at 19:49:40 -0600, Paul E Condon wrote: > > > > You must chmod +x this script: > > > # chmod +x script_name > > > > > > > Thanks, but I was forced to +x the script in order to run it manually. > > Something else is

Re: home network behind a firewall/router

2007-11-03 Thread Douglas A. Tutty
On Sat, Nov 03, 2007 at 07:46:20PM +0100, P?l Cs?nyi wrote: > > I have a Cable Modem connection to my ISP. > > my ISP >| > Cable Modem connection to my ISP >| > P

Re: firewall installation question

2007-11-03 Thread Steve Kemp
are executed by 'run-parts'. That has some restrictions upon the filenames you may use. See 'man run-parts' for details. My suggestion: 1. Name the script 'firewall'. 2. Make sure it is executable. 3. Make sure your firewall is flushed/off. 4. Run /etc/i

Re: firewall installation question

2007-11-03 Thread Paul E Condon
On Sat, Nov 03, 2007 at 10:32:29PM +0100, Pál Csányi wrote: > 2007/11/3, Paul E Condon <[EMAIL PROTECTED]>: > > I use Etch. I want to install a firewall script. I found one in > > www.debian-administration.org that establishes a transparent proxy for > > web browsing. I

Re: home network behind a firewall/router

2007-11-03 Thread Raj Kiran Grandhi
Pál Csányi wrote: Hello! I have a Cable Modem connection to my ISP. my ISP | Cable Modem connection to my ISP | PC box-1 firewall/gateway = | | LAN DMZ

Re: firewall installation question

2007-11-03 Thread Pál Csányi
2007/11/3, Paul E Condon <[EMAIL PROTECTED]>: > I use Etch. I want to install a firewall script. I found one in > www.debian-administration.org that establishes a transparent proxy for > web browsing. It is a script that seems to do what I want when I run > it manually. debadm

Vá: firewall installation question

2007-11-03 Thread Pál Csányi
2007/11/3, Paul E Condon <[EMAIL PROTECTED]>: > I use Etch. I want to install a firewall script. I found one in > www.debian-administration.org that establishes a transparent proxy for > web browsing. It is a script that seems to do what I want when I run > it manually. debadm

firewall installation question

2007-11-03 Thread Paul E Condon
I use Etch. I want to install a firewall script. I found one in www.debian-administration.org that establishes a transparent proxy for web browsing. It is a script that seems to do what I want when I run it manually. debadmin article says to put it in /etc/network/if-up.d/ and it will be run

home network behind a firewall/router

2007-11-03 Thread Pál Csányi
Hello! I have a Cable Modem connection to my ISP. my ISP | Cable Modem connection to my ISP | PC box-1 firewall/gateway = | | LAN DMZ | | PC box-2

Re: Better iptables firewall

2007-08-30 Thread John L Fjellstad
Michael Pobega <[EMAIL PROTECTED]> writes: > # Generated by iptables-save v1.3.6 on Mon Jun 18 09:55:18 2007 > *filter > :INPUT DROP [0:0] > :FORWARD ACCEPT [0:0] > :OUTPUT ACCEPT [35639:3072343] > -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT > -A INPUT -i lo -j ACCEPT > -A INPUT -p icm

Re: Better iptables firewall

2007-08-30 Thread Douglas A. Tutty
On Thu, Aug 30, 2007 at 12:25:25AM -0400, Michael Pobega wrote: > Currently I'm using iptables as my main firewall, and I'm having no > trouble with it whatsoever. But lately (Since college has started) I've > been connecting to a lot more networks, with more peers connec

Re: Better iptables firewall

2007-08-30 Thread ndemou
On 8/30/07, Michael Pobega <[EMAIL PROTECTED]> wrote: > [...] > I'm hoping some seasoned Debian sysadmins out there can help me by > advising me on how to better setup iptables...My current setup is: quite some info you can find here Securing Debian howto http://www.debian.org/doc/manuals/securing

Better iptables firewall

2007-08-29 Thread Michael Pobega
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Currently I'm using iptables as my main firewall, and I'm having no trouble with it whatsoever. But lately (Since college has started) I've been connecting to a lot more networks, with more peers connected. I'm worried about someb

Re: minimal firewall computer

2007-07-27 Thread Ron Johnson
un with a 20 M drive? >>> That was supposed to be 2G. Don't know where 20M came from. Wouldn't be >>> hard, though (and it isn't running Etch). >>> >> You can *easily* run a Potato firewall/router on a 200MB HDD. ssh, >> python, perl, nm

Re: minimal firewall computer

2007-07-27 Thread Douglas Allan Tutty
Wouldn't be > > hard, though (and it isn't running Etch). > > You can *easily* run a Potato firewall/router on a 200MB HDD. ssh, > python, perl, nmap, etc. > Potato is no longer supported by the secruity team. Would a potato firewall be wise? Doug. -- To UNSUBSCR

Re: minimal firewall computer

2007-07-27 Thread Ron Johnson
h (and it isn't running Etch). You can *easily* run a Potato firewall/router on a 200MB HDD. ssh, python, perl, nmap, etc. - -- Ron Johnson, Jr. Jefferson LA USA Give a man a fish, and he eats for a day. Hit him with a fish, and he goes away for good! -BEGIN PGP SIGNATURE- Version: Gnu

Re: minimal firewall computer

2007-07-27 Thread John Hasler
made > for running OpenBSD on your firewall/router. I'm not convinced that it is really more secure (except perhaps through obscurity). -- John Hasler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: minimal firewall computer

2007-07-27 Thread Douglas Allan Tutty
On Fri, Jul 27, 2007 at 07:13:18AM -0500, John Hasler wrote: > Ivan Glushkov writes: > > ISP <-> DSL Modem <-> Firewall <-> Router <-> home desktop & laptops > > You won't need a seperate router. The Debian box you are going to use as a > fire

Re: minimal firewall computer

2007-07-27 Thread Douglas Allan Tutty
er I started thinking of > adding a firewall. Since connecting my desktop between the router and > the modem is not an option (it must run windowz due to other members of > my family), I am thinking of buying the cheapest possible second hand > computer which still has two free PCI s

Re: minimal firewall computer

2007-07-27 Thread koffiejunkie
Ari Constancio wrote: Hi, Wireless routers such as the venerable Linksys WRT54GL can use 3rd-party firmware like OpenWRT and voilá... instant Linux router (with iptables and such). Some, like the Netgear DG834, is already running Linux with iptables. -- To UNSUBSCRIBE, email to [EMAIL PROTEC

Re: minimal firewall computer

2007-07-27 Thread Ari Constancio
routers should also have built-in firewall and dhcp > > functionality. > > A crappy firewall with no security support made by people with a reputation > for shipping buggy software. > -- > John Hasler > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > >

Re: minimal firewall computer

2007-07-27 Thread John Hasler
Ron Johnson writes: > Most "home market" routers should also have built-in firewall and dhcp > functionality. A crappy firewall with no security support made by people with a reputation for shipping buggy software. -- John Hasler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Re: minimal firewall computer

2007-07-27 Thread Ron Johnson
ebody hacked into my windowz computer I started thinking of > adding a firewall. Since connecting my desktop between the router and > the modem is not an option (it must run windowz due to other members of > my family), I am thinking of buying the cheapest possible second hand > comput

Re: minimal firewall computer

2007-07-27 Thread John Hasler
Ivan Glushkov writes: > ISP <-> DSL Modem <-> Firewall <-> Router <-> home desktop & laptops You won't need a seperate router. The Debian box you are going to use as a firewall will do everything the router does. > The question is actually what is the min

Re: minimal firewall computer

2007-07-27 Thread Semih Gokalp
sorry not celeron it is pentium-s sorry for my fault. On 27/07/07, Semih Gokalp <[EMAIL PROTECTED]> wrote: > > I have used same system in my home and i have used Celeron 133 Mhz,32 MB > SD-Ram,2 ethernet card,1.2 and 2.1 Gb HDD for firewall(iptables for local > LAN and W

Re: minimal firewall computer

2007-07-27 Thread Semih Gokalp
I have used same system in my home and i have used Celeron 133 Mhz,32 MB SD-Ram,2 ethernet card,1.2 and 2.1 Gb HDD for firewall(iptables for local LAN and WAN) and other some services.Its enought for me.I haven't got a problem. On 27/07/07, Ivan Glushkov <[EMAIL PROTECTED]> wrote:

minimal firewall computer

2007-07-27 Thread Ivan Glushkov
Hi all, I have a 2 MBit DSL connection at home and I have more or less classical scheme ISP <-> DSL Modem <-> Router <-> home desktop & laptops. Since recently somebody hacked into my windowz computer I started thinking of adding a firewall. Since connecting my desktop

apach2 behind firewall

2007-07-16 Thread csanyipal
Hello! I have apache2 behind a firewall. I want to setup firewall so, that one can it reach from the internet. I red the documentations: Linux 2.4 Packet Filtering HOWTO from Rusty Russell Linux 2.4 NAT HOWTO from Rusty Russell man iptables Setting up a simple Debian gateway <http://www.deb

Re: cups prints only on reboots -- solved (firewall present)

2007-05-10 Thread Jameson C. Burt
Firewall prevented new reserved addresses (10.55.1.* and 192.168.*.*), although it still allowed former standard IP addresses on printers. Rather than roll with my own iptables firewall script; on this new computer, I had used the firewall "firestarter". I had forgotten that I even i

Re: TCP Issues (firewall at eth0) how to proceed ...

2007-05-09 Thread Tim Johnson
000 Controller (PHY/Link) > --- >- I've installed from the netinst cd for debian 4.0 Argh! I did a typo in the subject, should have been "firewire" not "firewall" Sorry. tj -- Tim Johnson <[EMAIL PROTECTED]> Palmer

TCP Issues (firewall at eth0) how to proceed ...

2007-05-09 Thread Tim Johnson
Hello: References: Generally: Subject - PCI controller issues and stable Debian vs latest ubuntu Specifically: message-id [EMAIL PROTECTED] I disabled the onboard lan chip and put in a standalone ethernet card. Here's two relevant lines from a current dump of lspci: (This dump was made from a

Re: debian way to start firewall

2007-05-03 Thread Octavio Alvarez
On Thu, 03 May 2007 17:30:47 -0700, Tom Furie <[EMAIL PROTECTED]> wrote: On Wed, May 02, 2007 at 08:04:53AM -0700, Octavio Alvarez wrote: You might as well put some iptables-restore at the endo of the "up" of each interface in /etc/network/interfaces. This lets you control y

Re: debian way to start firewall

2007-05-03 Thread Tom Furie
On Wed, May 02, 2007 at 08:04:53AM -0700, Octavio Alvarez wrote: > You might as well put some iptables-restore at the endo of the "up" > of each interface in /etc/network/interfaces. This lets you control > your firewall per interface and have only the needed rules alive. Wou

Re: debian way to start firewall

2007-05-02 Thread Octavio Alvarez
On Wed, 02 May 2007 04:06:13 -0700, Vladi Lemurov <[EMAIL PROTECTED]> wrote: Distro etch, stable, i386. I have a firewall script (based on iptables) and it works perfectly on debian and other distros but where am I to put it? I found nothing in debian-reference (at least gr

Re: debian way to start firewall

2007-05-02 Thread Vladi Lemurov
Well the same way, scripts and links. :) Anyway I did it the way you offered, it works, hope I've chosen the proper place in startup sequence :) Thanks to all! 02.05.2007 18:12: Indeed, try: Put script in /etc/init.d and make it executable. update-rc.d /etc/init.d/scriptname defaults This a

RE: debian way to start firewall

2007-05-02 Thread Andrew Critchlow
> Date: Wed, 2 May 2007 18:06:13 +0700 > From: [EMAIL PROTECTED] > To: debian-user@lists.debian.org > Subject: debian way to start firewall > > Hello! > Distro etch, stable, i386. > I have a firewall script (based on iptables) and it works perfectly on > debian and o

debian way to start firewall

2007-05-02 Thread Vladi Lemurov
Hello! Distro etch, stable, i386. I have a firewall script (based on iptables) and it works perfectly on debian and other distros but where am I to put it? I found nothing in debian-reference (at least grepping "iptables" gave no answers). I googled and found different solut

Re: [OT] Favoured Firewall

2007-04-27 Thread Celejar
u, Apr 26, 2007 at 08:11:26AM +0200, Michael Dominok wrote: > > >> Am Mittwoch, den 25.04.2007, 15:05 -0400 schrieb Celejar: > > >>> Well, on this list our (including me) favorite firewall is > > >>> Shorewall, > > >> Well, is it? Mine's IPCop,

Re: [OT] Favoured Firewall

2007-04-27 Thread Daniel Palmer
Firehol is pretty easy to configure for plain accept this and block that usage. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: [OT] Favoured Firewall

2007-04-27 Thread Adam Hardy
firewall is Shorewall, Well, is it? Mine's IPCop, though. iptables here. It's a little bit tough to set up, but in the end it's worth it in my opinion. Once you get used to the way iptables works you can build a firewall for any system. IPtables is *the* Linux firewall. Most of t

Re: [OT] Favoured Firewall

2007-04-26 Thread Greg Folkert
On Thu, 2007-04-26 at 20:55 -0400, Michael Pobega wrote: > > Michael Pobega wrote: > > > On Thu, Apr 26, 2007 at 08:11:26AM +0200, Michael Dominok wrote: > > >> Am Mittwoch, den 25.04.2007, 15:05 -0400 schrieb Celejar: > > >>> Well, on this li

Re: [OT] Favoured Firewall

2007-04-26 Thread Michael Pobega
r: > >>> Well, on this list our (including me) favorite firewall is > >>> Shorewall, > >> Well, is it? Mine's IPCop, though. > >> > > > > iptables here. It's a little bit tough to set up, but in the end it's > > worth it

Re: [OT] Favoured Firewall

2007-04-26 Thread Franck Joncourt
On Thu, Apr 26, 2007 at 05:30:03PM -0500, Sam Leon wrote: > > Michael Dominok wrote: > > Am Mittwoch, den 25.04.2007, 15:05 -0400 schrieb Celejar: > > Well, on this list our (including me) favorite firewall is Shorewall, > > Well, is it? Mine's IP

Re: [OT] Favoured Firewall

2007-04-26 Thread Sam Leon
Michael Dominok wrote: Am Mittwoch, den 25.04.2007, 15:05 -0400 schrieb Celejar: Well, on this list our (including me) favorite firewall is Shorewall, Well, is it? Mine's IPCop, though. I have used smoothwall for 3 years now. I think I might change to pfsense soon t

Re: [OT] Favoured Firewall

2007-04-26 Thread Andrew J. Barr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Pobega wrote: > On Thu, Apr 26, 2007 at 08:11:26AM +0200, Michael Dominok wrote: >> Am Mittwoch, den 25.04.2007, 15:05 -0400 schrieb Celejar: >>> Well, on this list our (including me) favorite firewall is >>> Shorew

Re: [OT] Favoured Firewall

2007-04-26 Thread Michael Pobega
On Thu, Apr 26, 2007 at 08:11:26AM +0200, Michael Dominok wrote: > Am Mittwoch, den 25.04.2007, 15:05 -0400 schrieb Celejar: > > Well, on this list our (including me) favorite firewall is Shorewall, > > Well, is it? Mine's IPCop, though. > iptables here. It's a lit

[OT] Favoured Firewall

2007-04-25 Thread Michael Dominok
Am Mittwoch, den 25.04.2007, 15:05 -0400 schrieb Celejar: > Well, on this list our (including me) favorite firewall is Shorewall, Well, is it? Mine's IPCop, though. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Checkpoint firewall/VPN with debian

2007-03-16 Thread Philippe Marzouk
On Fri, Mar 16, 2007 at 11:22:18AM +0100, Arnau wrote: > Hi Philippe > >> In my company they have a checkpoint firewall, there is a software > >>for windows, securemote, to connect to it and stablish a VPN. I'd like > >>to do the same from my debian box.

Re: Checkpoint firewall/VPN with debian

2007-03-16 Thread Arnau
Hi Philippe In my company they have a checkpoint firewall, there is a software for windows, securemote, to connect to it and stablish a VPN. I'd like to do the same from my debian box. I have checked on checkpoint's site and the only thing related to linux is a quite old version f

Re: Checkpoint firewall/VPN with debian

2007-03-15 Thread Philippe Marzouk
On Thu, Mar 15, 2007 at 08:14:29PM +0100, Arnau wrote: > Hi all! > > In my company they have a checkpoint firewall, there is a software > for windows, securemote, to connect to it and stablish a VPN. I'd like > to do the same from my debian box. I have checked on checkpoi

<    3   4   5   6   7   8   9   10   11   12   >