Re: [LAD] [ot] - NEED some security advise PLEASE! + new question

2009-02-16 Thread Fernando Lopez-Lezcano
On Sun, 2009-02-15 at 23:08 +1100, Steve Lindsay wrote: On Sun, Feb 15, 2009 at 9:57 PM, Fons Adriaensen f...@kokkinizita.net wrote: A weakly related OT question: I need to set up a machine as a router. One side is a fixed public IP address, the other side is a local net using

Re: [LAD] [ot] - NEED some security advise PLEASE! + new question

2009-02-16 Thread Fons Adriaensen
Thanks to all who responded ! [ Steve Lindsay ] I find shorewall is the nicest way to go about this sort of thing. You write some fairly straightforward configuration files describing your setup and what you want to achieve, and it handles all the iptables configuration for you. Easy to

Re: [LAD] [ot] - NEED some security advise PLEASE! + new question

2009-02-15 Thread Luis Garrido
I need to set up a machine as a router. One side is a fixed public IP address, the other side is a local net using 192.168.1.x. I want to give internet access to the machines on the local net, so this requires (AFAIK) NAT. Anyone has a pointer to a good tutorial about how to do this ?

Re: [LAD] [ot] - NEED some security advise PLEASE! + new question

2009-02-15 Thread Jörn Nettingsmeier
Luis Garrido wrote: I need to set up a machine as a router. One side is a fixed public IP address, the other side is a local net using 192.168.1.x. I want to give internet access to the machines on the local net, so this requires (AFAIK) NAT. Anyone has a pointer to a good tutorial about how

Re: [LAD] [ot] - NEED some security advise PLEASE! + new question

2009-02-15 Thread Steve Lindsay
On Sun, Feb 15, 2009 at 9:57 PM, Fons Adriaensen f...@kokkinizita.net wrote: A weakly related OT question: I need to set up a machine as a router. One side is a fixed public IP address, the other side is a local net using 192.168.1.x. I want to give internet access to the machines on the

Re: [LAD] [ot] - NEED some security advise PLEASE! + new question

2009-02-15 Thread Kjetil S. Matheussen
Fons Adriaensen: ... And if it's a public server, I'd rather not have anybody logging in through ssh who is not capable of dealing with key logins. I disabled password logins through ssh on my public machines. That seems to be the best way to deal with it. A weakly related OT question: I

Re: [LAD] [ot] - NEED some security advise PLEASE! + new question

2009-02-15 Thread Luis Garrido
/sbin/rmmod ipchains /sbin/modprobe iptable_nat /sbin/modprobe ip_conntrack_ftp /sbin/modprobe ip_nat_ftp /sbin/iptables -F -t filter /sbin/iptables -Z -t filter /sbin/iptables -X -t filter /sbin/iptables -F -t nat /sbin/iptables -Z -t nat /sbin/iptables -X -t nat /sbin/iptables -P

Re: [LAD] [ot] - NEED some security advise PLEASE! + new question

2009-02-15 Thread Gene Heskett
On Sunday 15 February 2009, Fons Adriaensen wrote: On Sun, Feb 15, 2009 at 11:39:09AM +0100, Frank Barknecht wrote: ... And if it's a public server, I'd rather not have anybody logging in through ssh who is not capable of dealing with key logins. I disabled password logins through ssh on my