🚀 go-pugleaf

In article <6ja3mh$47u$2@kiyoko.communique.net>, hebertf@cnrf.nola.navy.mil (Fred Hebert) wrote:
>I am looking for a Linux guru for some quick answers to questions about 
>firewalls and proxy servers.

>
<snip-snip>
>

>Nearly all of my customers are getting connected to the Internet.  Most only 
>have dial on demand connectivity, but some have leased lines.  One of my 
>favorite configurations is to user a proxy server to connect the entire office 
>through a single ISP connection.  This way the private IP addresses on the 
>network are not visible on the Internet.  This can also be done with some 
>firewalls.  Is there such a product available for Linux? If so where can I get 
>it?
>

I'm not an expert at this, but I can make a couple of comments.  The 
masquerading features you are looking for are built into the latest kernels 
(as are the firewall features).  Look at www.linux.org in the help centre for 
information on this.  In particular, the Firewall and Ip-Masqurade Howto's

Dial on demand can be accomplished in a couple of ways.  The only way that I 
have any experience with is the program DialD 
(www.loonie.net/~eschenk/diald.html)  which brings your link up and down 
depending upon the traffic flowing through it.  I found it to work quite 
well so far.  Again check the howto's (in particular ISP-Hookup).

BTW, for this kind of question a better group to look at is 
comp.os.linux.networking.

Hope this helps,
erik.

Im not a Linux guru... but I have a suggestions for firewalls... a very good
firewall is cisco 1800's or 2400's not sure but you could visit there web
site at  www.cisco.com

Fernando..

Fred Hebert wrote in message <6ja3mh$47u$2@kiyoko.communique.net>...
>I am looking for a Linux guru for some quick answers to questions about
>firewalls and proxy servers.
>
>I run a part time consulting business specializing  in setting up small
(5-50
>user) Novell, Windows, and Unix networks  networks.  In my day job I manage
a
>mixed 9000+ user network.  A friend put me on to Linux as a cheaper and
>possibly better alternative to some of my existing configurations.  He
showed
>me his small Linux server and it really impressed me.  It looked like a
good
>rival to $5,000 worth of SCO Open Server.  Unfortunately my friend could
not
>answer some technical questions.
>
>Nearly all of my customers are getting connected to the Internet.  Most
only
>have dial on demand connectivity, but some have leased lines.  One of my
>favorite configurations is to user a proxy server to connect the entire
office
>through a single ISP connection.  This way the private IP addresses on the
>network are not visible on the Internet.  This can also be done with some
>firewalls.  Is there such a product available for Linux? If so where can I
get
>it?
>
>Sincerely,
>Fred Hebert.

Erik Soosalu (esoosalu@nospam.hotmail.com) wrote:
: In article <6ja3mh$47u$2@kiyoko.communique.net>, hebertf@cnrf.nola.navy.mil (Fred Hebert) wrote:
: >I am looking for a Linux guru for some quick answers to questions about 
: >firewalls and proxy servers.
[...]
: >Nearly all of my customers are getting connected to the Internet.  Most only 
: >have dial on demand connectivity, but some have leased lines.  One of my 
[...]

: I'm not an expert at this, but I can make a couple of comments.  The 
: masquerading features you are looking for are built into the latest kernels 
: (as are the firewall features).  Look at www.linux.org in the help centre for 
: information on this.  In particular, the Firewall and Ip-Masqurade Howto's

	Good starting point for this `man ipfwadm'.

: Dial on demand can be accomplished in a couple of ways.  The only way that I 
: have any experience with is the program DialD 
: (www.loonie.net/~eschenk/diald.html)  which brings your link up and down 
: depending upon the traffic flowing through it.  I found it to work quite 
: well so far.  Again check the howto's (in particular ISP-Hookup).

	Dial-on-demand feature embeded now in pppd.
	For leaf IP-nodes `request-route' (kerneld) can be used
for default route wake-up.

Hi Fred;

Fred Hebert wrote:

> I am looking for a Linux guru for some quick answers to questions about
> firewalls and proxy servers.
[snip]
> Nearly all of my customers are getting connected to the Internet.  Most only
> have dial on demand connectivity, but some have leased lines.  One of my
> favorite configurations is to user a proxy server to connect the entire office
> through a single ISP connection.  This way the private IP addresses on the
> network are not visible on the Internet.  This can also be done with some
> firewalls.  Is there such a product available for Linux? If so where can I get
> it?

Sure can, and it can be done easily too.

What you want is a reasonably current linux release (I've used the
current Debian, but other flavours may suit your needs).  Onto that, you
want to compile a custom kernel (easy stuff) with IP Masquerading
Support.

Then, put on some dial-on-demand software (such as DialD), and you're
away - it'll do a masquerading/firewalling service for a private network
to the internet over some kind of dial-up service using PPP or SLIP.

Check out the Masquerading Mini HOW-TO
(http://sunsite.unc.edu/LDP/HOWTO/mini/IP-Masquerade.html), as well as
the Masq. Resource Page (http://ipmasq.home.ml.org/).  Another cool
resource is the Masq. Apps page (http://dijon.nais.com/~nevo/masq/).

Good luck!

Richard

--
Richard Parry                                Network Controller/Analyst
National Library of New Zealand            Richard.Parry@natlib.govt.nz
Phone 64 4 474 3010         Mobile 021 664 655        Fax 64 4 474 3140

On Tue, 12 May 1998 18:17:52 GMT, hebertf@cnrf.nola.navy.mil (Fred
Hebert) wrote:

>I am looking for a Linux guru for some quick answers to questions about 
>firewalls and proxy servers.
>
>I run a part time consulting business specializing  in setting up small (5-50 
>user) Novell, Windows, and Unix networks  networks.  In my day job I manage a 
>mixed 9000+ user network.  A friend put me on to Linux as a cheaper and 
>possibly better alternative to some of my existing configurations.  He showed 
>me his small Linux server and it really impressed me.  It looked like a good 
>rival to $5,000 worth of SCO Open Server.  Unfortunately my friend could not 
>answer some technical questions.
>
>Nearly all of my customers are getting connected to the Internet.  Most only 
>have dial on demand connectivity, but some have leased lines.  One of my 
>favorite configurations is to user a proxy server to connect the entire office 
>through a single ISP connection.  This way the private IP addresses on the 
>network are not visible on the Internet.  This can also be done with some 
>firewalls.  Is there such a product available for Linux? If so where can I get 
>it?
>
>Sincerely,
>Fred Hebert.

I have be playing with a Proxy for about a year now it is very easy
here are some of the things that you must do !

1.  you kernel must support IP Masquerading 
2.  if not then you need to make it so by recompile the kernel
3.  then you need to set up the Firewall rules in a executable file
such as "rc.local" in  /etc/rc.d/
Use these they work just fine for me ( Remember to set all clients  to
these address )

----------------------------------------------- cut here ! ---------
/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
/sbin/modprobe ip_masq_irc
ppp-on
ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.0.1/24 -D 0.0.0.0/0   #server IP 
ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.0.2/32 -D 0.0.0.0/0   #client ( any Os ) 
ipfwadm -F -a m -S 192.168.0.3/32 -D 0.0.0.0/0   #client ( any Os )
ipfwadm -F -a m -S 192.168.0.4/32 -D 0.0.0.0/0   #client ( any Os )
ipfwadm -F -a m -S 192.168.0.5/32 -D 0.0.0.0/0   #client ( any Os )

---------------------------------------------- end of cut ! 

4.     then you need to setup your Proxy clients ( such thing as
Running Tcp/Ip under ether net ! )
 you need to make the gateway under you clients the same as that of
your Proxy server ( your linux box )
and all so give each computer an privet IP address such as "
192.168.0.2" for a non static Internet address.
Then you need to tell each computer How there DNS is ( as well as the
linux box, if not already done )
give each computer a Host name and don�t forget the assign the Subnet
as well .

That should do it !
is that don�t work drop me a line !
or go to this URL : http://www.hktel.com/~lawrence/ipmasq/ipmasq.html

Have fun !

Edited stuff..................................

>>I am looking for a Linux guru for some quick answers to questions about
>>firewalls and proxy servers.
>>
>>Sincerely,
>>Fred Hebert.

Edited stuff.............................
>
>I have be playing with a Proxy for about a year now it is very easy
>here are some of the things that you must do !
>
>>or go to this URL : http://www.hktel.com/~lawrence/ipmasq/ipmasq.html
>
>Have fun !


I have just set up my first Linux box, and have fallen in love with this OS.
I am running two NT 5.0 and two Win 98 workstations, one NT 5.0 server and
(all beta testing)they all connect to my ISP through  a PDC NT 4.0 server,
with Internet Information , and Proxy Server.
My  question seems to have been answered by Noel, however as I have just
started with Linux, the configuration will take me some time to set up the
Linux box as a proxy.
As I already am running a proxy server:
(a) Is there a configuration that will allow me to set up the Linux box as
a Proxy client ?.

(b) Can I configure the present browser that is used to run the online How
To files as a proxy seek browser and not a dial-up ?

I will be scouting the Linux pages mentioned, and if I find anything that
addresses to this subject I will pass it on.

Louis.
The lewbie.

Louis Davidson wrote:
> (a) Is there a configuration that will allow me to set up the Linux box as a Proxy client ?.

You mean as a proxy-server? Then use "squid".
Proxy-client is set up in your browser.

regards, mike

Michael Zieger wrote:
> 
> Louis Davidson wrote:
> > (a) Is there a configuration that will allow me to set up the Linux box as a Proxy client ?.
> 
> You mean as a proxy-server? Then use "squid".
> Proxy-client is set up in your browser.
> 
> regards, mike
Where can I find "squid" ?
Thanks
-- 
Andrea Beardo

Elsag Bailey Italia
Via Colombo, 49 
20090 Trezzano S.N. Milano (Italy)
Tel. +39 2 48419295
Fax  +39 2 48403483

On Wed, 17 Jun 1998 11:42:06 +0200, Andrea Beardo
<andrea.beardo@elsag.it> wrote:

>Michael Zieger wrote:
>> 
>> Louis Davidson wrote:
>> > (a) Is there a configuration that will allow me to set up the Linux box as a Proxy client ?.
>> 
>> You mean as a proxy-server? Then use "squid".
>> Proxy-client is set up in your browser.
>> 
>> regards, mike
>Where can I find "squid" ?

Last time I wanted it's home page I just typed "squid" into Yahoo.  It
came up as the very first match.

While I'm not usually the type to rattle off a quick "RTFM", it really
would have been easier for you to have attempted to find this
yourself.  Apologies if you have no web access or something.


Andy J. Smith <se311309@stmail.staffs.ac.uk>
http://www.strugglers.net/andy/