Linux Firewall

[tombo_m6]

I'm trying to turn an old Pentium into a firewall using Linux. I'm having some problems with the configuration. With only one NIC I can get the internet connection working, but when the other NIC is installed, the internet connection fails. Are there any good online resources for this type of problem or can anyone help with the configuration?

 

[poorboy]

There's a couple of ways of doing this. You can go "old-skool" and build it from scratch (as you appear to be doing), or grab a copy of <A HREF="http://www.smoothwall.org" target="_new">Smoothwall</A> - 20MB download, <A HREF="http://www.mandrakesoft.com/products/snf" target="_new">Mandrake SNF</A> 280 MB download, or the firewall distro of your choice (Astaro, etc, etc).

Being a geek, I've been gone from running "regular" SuSE firewall software, to OpenBSD DIY firewall box - but have just gone back to Smoothwall. Very very easy to setup and use.

Problems like you describe are usually routing or default gateway problems. If you post the error messages (if any), I may be able to help. Otherwise, take a look at <A HREF="http://www.tldp.org" target="_new">The Linux Documentation Project</A> for related HOWTOs.

<i>How the heck does Tom know I'm addicted??? Not that I'm paranoid...</i>

 

[papasmurf]

If I may ask, what is the firewall for?

In battle Israel uses F-16's and big ass tanks, Palestine uses small children strapped to bombs. Which do you support?

 

[tombo_m6]

During the boot process when it trys to bring up the ethernet cards, it says that it failed to determine the ip address. That is for the NIC being used for internet. The card running to my other machine starts fine.

Thanks for the other info though i will check it out.

 

[tombo_m6]

It is just being used to protect my home network.

 

[silverpig]

DCHP enabled?

Some day I'll be rich and famous for inventing a device that allows you to stab people in the face over the internet.

 

[poorboy]

Sounds like it. If the NICs are trying to get their IP automagically, both the modem and a machine on the lan will need to provide one.

Make sure you have separate IP ranges for each network too. Eg, 192.168.0.x internal and 10.0.0.x external (nic to modem) for example.



<i>Wake up, Neo</i>

 

[tombo_m6]

I'll check that out. Thanks.