[Gllug] Setting up SW firewall (Was Sharing NTL broadband using weedless router)

[Benjamin Edwards]

Thanks for everyones help.  For reasons to convoluted to go into the
other person has decided not to share there connection so I am getting
my own.  For equally convoluted reason I am using the aforementioned
Netgear router elsewhere.

Therefore the NTL box is going to be initially connected straight to
the Debian Box (I will authenticate using windowz).  What I want to know
is the easiest way of setting up a firewall no this box (preferably with
snort).  I think I can filter between eth0:0 and eth0:1 but am not too
sure how to set this up and what firewall (debian) package to use.  Is
there one with sensible preset rules set up and a web (webmin)
interface.

As a (possible) point of interest I found quite a good support forum
with various NTL support bods giving unofficial support for things NTL
do not officially support (http://www.chetnet.co.uk/portal/forum/).

 They recommend a linksys wireless router (802.11b) which is only
£36.62 inc val + delivery
(http://www.amazon.co.uk/exec/obidos/ASIN/B00005ARK3/026-5985813-7188463).
 

There is also a similar 802.11g router which is almost certainly also a
good one to use
(http://www.amazon.co.uk/exec/obidos/ASIN/B00008DOYO/026-5985813-7188463)
for £58.62.

I belive these both have detachable antennas.

Ben


--
Ben Edwards - 2287

>>> gllug at amias.org.uk 04/26/04 07:45pm >>>
On Mon, 26 Apr 2004 14:34:28 +0100 (BST)
Chris Bell <chrisbell at overview.demon.co.uk> wrote:

> Just ignore the fact that it has an ADSL modem included in
>  the box, and set the boxes on your network to use the NTL box as
the
>  default gateway.

If it is a DG834G then you can accomplish this by opening up the
secret
shell mode
(see  my earlier email - 20040426120705.00f812a2.gllug at amias.org.uk )
and just set the route to the NTL box IP from the command line .

something like this should do the job .

# route del default
# route add default ip.of.ntl.box

This should hand out the right route to all dhcp clients connecting
after
you do this and should last untill the router is rebooted.

Toodle-pip
Amias


-- 
Gllug mailing list  -  Gllug at gllug.org.uk 
http://lists.gllug.org.uk/mailman/listinfo/gllug 

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________


______________________________________________________________________
"This email and any files transmitted with it are confidential. It is for the intended recipient only. If you have received the email in error please notify the author by replying to this email. If you are not the intended recipient, you must not disclose, distribute, copy, print, or rely on this email. Any views expressed by an individual within this email which do not constitute or record professional advice relating to the RNLI, do not necessarily reflect the views of the organisation.

Registered Charity Number 209603
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: Benjamin Edwards.vcf
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20040427/9cae780e/attachment.ksh>
-------------- next part --------------
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug