It's possible to have the one Linux box as the proxy and also as a firewall
to secure the two other boxes. It's fine whether you used one NIC or two
NICs but it would be better to use two NICs on your proxy.
Apply several conditions to secure your proxy like shutting down your unused
services, delete unused users, blablabla.
Activate masquerading on your proxy like as follows:
for a in /proc/sys/net/ipv4/conf/*/forwarding

do echo "1" > $a

done


Install proxy application (e.g. squid) and apply your rule there.

I'm wondering if the person from your ISP really understand about what
he/she said or not :)


Regards,

cyhss




----- Original Message -----
From: "nokio x0" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 29, 2003 11:51 PM
Subject: Redhat 8.0 networking/routing/security issue...


> Hi, i'm not sure if this is the right mailing list to post to or not. But
> i'm sure I will soon find out...
>
> Anyway. I'm fairly new with Linux networking and i'm a little stumped. I
> have three boxes, none have OS's yet, but i'm planning on one having
Windows
> XP Pro, and the other two with Redhat 8.0. My plan is to have one of the
> Redhat boxes set up kind of as a router(?) so my two computers other
> computers could share the same internet. Is this possible? and if so how
> would I go about doing this? Also how would I go about securing the redhat
> box for this kind of configuration? I have a cable modem with Comcast
@home
> internet. I'm not sure how to configure this under the Linux environment.
I
> have contacted Comcast but their support told me that I cannot use their
> internet service with Linux but I have heard from many other network gurus
> that they are full of it and it is totally possible. Any help would be
much
> appreciated. Thanks in advance...
>
> Thanks,
> nokio
>
> _________________________________________________________________
> Add photos to your e-mail with MSN 8. Get 2 months FREE*.
> http://join.msn.com/?page=features/featuredemail
>
>
> --------------------------------------------------------------------------
-
> --------------------------------------------------------------------------
--
>



---------------------------------------------------------------------------
----------------------------------------------------------------------------

Reply via email to