🚀 go-pugleaf

On Tue, 12 May 1998 18:17:52 GMT, hebertf@cnrf.nola.navy.mil (Fred
Hebert) wrote:

>I am looking for a Linux guru for some quick answers to questions about 
>firewalls and proxy servers.
>
>I run a part time consulting business specializing  in setting up small (5-50 
>user) Novell, Windows, and Unix networks  networks.  In my day job I manage a 
>mixed 9000+ user network.  A friend put me on to Linux as a cheaper and 
>possibly better alternative to some of my existing configurations.  He showed 
>me his small Linux server and it really impressed me.  It looked like a good 
>rival to $5,000 worth of SCO Open Server.  Unfortunately my friend could not 
>answer some technical questions.
>
>Nearly all of my customers are getting connected to the Internet.  Most only 
>have dial on demand connectivity, but some have leased lines.  One of my 
>favorite configurations is to user a proxy server to connect the entire office 
>through a single ISP connection.  This way the private IP addresses on the 
>network are not visible on the Internet.  This can also be done with some 
>firewalls.  Is there such a product available for Linux? If so where can I get 
>it?
>
>Sincerely,
>Fred Hebert.

I have be playing with a Proxy for about a year now it is very easy
here are some of the things that you must do !

1.  you kernel must support IP Masquerading 
2.  if not then you need to make it so by recompile the kernel
3.  then you need to set up the Firewall rules in a executable file
such as "rc.local" in  /etc/rc.d/
Use these they work just fine for me ( Remember to set all clients  to
these address )

----------------------------------------------- cut here ! ---------
/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
/sbin/modprobe ip_masq_irc
ppp-on
ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.0.1/24 -D 0.0.0.0/0   #server IP 
ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.0.2/32 -D 0.0.0.0/0   #client ( any Os ) 
ipfwadm -F -a m -S 192.168.0.3/32 -D 0.0.0.0/0   #client ( any Os )
ipfwadm -F -a m -S 192.168.0.4/32 -D 0.0.0.0/0   #client ( any Os )
ipfwadm -F -a m -S 192.168.0.5/32 -D 0.0.0.0/0   #client ( any Os )

---------------------------------------------- end of cut ! 

4.     then you need to setup your Proxy clients ( such thing as
Running Tcp/Ip under ether net ! )
 you need to make the gateway under you clients the same as that of
your Proxy server ( your linux box )
and all so give each computer an privet IP address such as "
192.168.0.2" for a non static Internet address.
Then you need to tell each computer How there DNS is ( as well as the
linux box, if not already done )
give each computer a Host name and don�t forget the assign the Subnet
as well .

That should do it !
is that don�t work drop me a line !
or go to this URL : http://www.hktel.com/~lawrence/ipmasq/ipmasq.html

Have fun !