Re: Firewall question

2006-06-09 Thread Lennart Sorensen
On Fri, Jun 09, 2006 at 05:43:24AM +0200, Andi Kleen wrote: > No one out on the internet, but it would be trivial for someone outside > his house. All his traffic will be on a long unsecured cable. > > That is why I would never bridge home ethernet traffic onto a DSL line. Hmm, traffic sent betw

Re: Firewall question

2006-06-08 Thread Andi Kleen
> Well the DSL modem only transfers whatever data the ISP end sends to it, > which in your case is just PPP packets (LCC or LCP I think). No one out > on the internet No one out on the internet, but it would be trivial for someone outside his house. All his traffic will be on a long unsecured c

Re: Firewall question

2006-06-08 Thread Lennart Sorensen
On Thu, Jun 08, 2006 at 11:57:12AM -0700, Alex Davis wrote: > The scenario: > I have a DSL modem in pass through (bridge) mode. The linux firewall/router > has a single ethernet card. It is running pppoe. This gives two interfaces: > eth0 and ppp0. The firewall is running iptables. There are sev

Firewall question

2006-06-08 Thread Alex Davis
The scenario: I have a DSL modem in pass through (bridge) mode. The linux firewall/router has a single ethernet card. It is running pppoe. This gives two interfaces: eth0 and ppp0. The firewall is running iptables. There are several machines behind the firewall. Problem: I've been told that if