Networking :: Firewall As Router - Pros Versus Cons

Jan 27, 2010

I'm mentoring my local high school's IT club as they prepare to participate in a cyberdefense competition (see IT Olympics). Generally we are given four boxes and need to set up a network that provides certain services (which services change from year to year, but usually include a web server, email server, FTP server, and an application server of some sort) and support client PCs that connect from the WAN. The red team then tries to break into our network to steal "flags" from our servers and to set their own "flags" on our servers.

Generally we set up the firewall with two network interface cards (one to the WAN and one to our LAN), and connect the LAN NIC to a router, which then connects to the other three boxes. But we do have the option of installing additional NICs in the firewall and configuring it as a router. I can't shake the feeling that there is a security advantage to such a configuration, but I can't say what that advantage is. Perhaps something with configuring ipTables on the internal boxes to accept connections only from the firewall's NIC, and then only for the services we want that box to support (to prevent an intruder from connecting directly from one box to another)?

View 2 Replies


ADVERTISEMENT

Slackware :: Pros/Cons Installing From Source Versus Packages

Mar 15, 2011

At work / home / laptops I have about 5 slackware machines. I have always tended to install new packages on each machine from source, generally using slackbuilds when available. I thought I would try 'libreoffice' and reading alien-bobs blog I deduced that a full from source install might be pretty difficult, so I followed his advice and just took the package (.txz file) and used installpkg. To my slight surprise this installed and ran perfectly.

Now I'm wondering if someone would clarify under what circumstances you can just take the slackware package from one machine to another and install. More generally I guess what are the main advantages of building from source. Is it mainly about availability of all the required dependencies?

View 9 Replies View Related

General :: Pros And Cons Of Virtual Hosting Versus Separate Machine

Feb 9, 2011

I am having vitural hosting around three websites using Centos. I need to type in the full domain name include www to enter the 2 of the vitural hosting sites. Pros and Cons of vitural hosting vs separate machine? I got a questions about static IP. Assume I having a linksys router with port forwarding function, I have three seperate machines with different private address connect to the same linksys router. Can I entry all private address forward to port 80? Does it work? If I insist to host website on three machines, does that mean I need 3 static IP and 3 linksys router? I got two conventional web services only showing information but one got mysql db for user to input data, thats why I asking if it is good idea to seperate web page on different machines.

View 14 Replies View Related

Networking :: Pros And Cons USB NIC?

Apr 3, 2011

My traffic is around 10MBdown/2MBup. Would you consider an USB NIC(wired) at these needs?

View 5 Replies View Related

Ubuntu :: Formatting Drive - Different Pros And Cons Of Various

Apr 24, 2011

I am trying to format an external hard drive and wanted to know the pros and cons of various different formats offered in Linux. I hear that ext4 is better (most stable) than anything else (better than ext3 or ext2) for Ubuntu. I wanted to know where I can obtain more info on these various formats. I want a format that would be (1) as stable as it can get in formating a hard drive, and (2) readable and writable in both Windows and other versions of Linux (say Mandriva).

View 9 Replies View Related

Slackware :: Pros And Cons To Having Both /usr And /usr/local Partitions?

Jun 1, 2010

Having both a /usr and /usr/local partition seems logical: A seperate partition for /usr would preserve the /root partition since it changes in size, while reducing the initial install size of /root. Having a /usr/local partition would then preserve custom software (ie. scribus, bender etc.)not distro related, scripts, and settings.

Would having /usr and /usr/local create any problems locating files? I understand that /usr/local has a relative function depending on whether it is being used as a machine in a network context or whether it is being used as a desktop and /usr/local refers to user custom files. I am setting up slackware64 multilib and think I want to preserve both distro and user files to expedite do overs keep trouble shooting clean.

View 14 Replies View Related

General :: Unity And GNOME Shell Pros/Cons?

Jan 20, 2011

I'm thinking about the near future with Unity and GNOME Shell. I've tried both a little and wondered what I'm missing; they seem pretty much the same on the outside! I'm assuming it's similar to GNOME and XFCE; they look quite similar, with XFCE aiming to be lighter-weight, but what's the difference between these two new 3D environments? Why did Ubuntu fork the GNOME environment when it barely differs from what GNOME are providing?

View 3 Replies View Related

Ubuntu Installation :: Wubi Vs Dual Booting / Pros And Cons Of Using These?

Feb 6, 2010

What are the pros and cons of using wubi instead of dual booting?

View 8 Replies View Related

Slackware :: Mixing 13 And 13-current Java Packages - Pros And Cons?

Apr 28, 2010

I understand it is not generally a good idea to mix 13 and 13-current packages but I am installing OpenProj which requires JDK and the installed JRE (6-18) is up-level from 13's JRE (6-16) and back-level from the 13-current JDK (6-19). Presumably JRE and JDK should be at the same level. Would it be better to take both JRE and JDK to 13-current (6-19) or to take both to 13 (6-16)?

View 3 Replies View Related

Ubuntu Networking :: Setup A Router With Firewall?

Feb 9, 2010

I want to setup a router with firewall on ubuntu box that will connect windows pcs one serving as outside source and one serving as inside target.

View 2 Replies View Related

Ubuntu Networking :: As Firewall - Router With Aircard - Wwan

Apr 23, 2010

I have seen tutorials on setting up a secured firewall/router/gateway using ubuntu server as the platform. However, I am wondering if anyone has had experience with using an aircard (wireless broadband card via usb) to set up a router.

Which card do you recommend? Any precautions? Any specific code already written to automatically recognize mobile broadband cards and restart the connection if it goes stale?

View 8 Replies View Related

Ubuntu Networking :: Setting Up A Router And Firewall For 10.10 Server 64-bit?

Jan 28, 2011

post the "perfect" tutorial for setting up a router and firewall for Ubuntu 10.10 Server 64-bit? I'm kind of a n00b when it comes to Linux, so I get really confused with some things, I have seen things on the ubuntu wiki about this... but it really confuses me =

I'm trying to setup my ubuntu sys as a router and firewall... Internet -> Ubuntu (Router) -> Switch (no DHCP on it) -> Computers I've already setup bind and dhcp3 and got those working perfectly... I've also setup Squid3 and Dansguardian for content filtering (blocking ads and such) and got them working too... I want to set it all up to be transparent, and allow the system itself to function as a powerful firewall router, giving absolutely NO issues to client computers connected, and no speed reduction at all.... I want to setup the firewall to allow all outgoing connections, but block everything incoming (stealth the network)... Forcing all http/s traffic to pass through dansguardian, then to squid...

But am very confused on how to pull this off... The system is running Ubuntu 10.10 Server 64-bit, with 4 GB of RAM, 320 GB SSD, and two 1Gb NIC cards... Sorry if I'm not very clear, I do speak english perfectly, but just kinda new to the "Linux world", I was using SONICWALL but that's getting a little too costly to my network and wanna do a free alternative... Something completely CUSTOM, not using some network security distro.

View 1 Replies View Related

Ubuntu Networking :: How To Set Up A Gateway/router And Firewall On Server

Jul 20, 2011

I want to do is setup a gateway(or router, idk what Ubuntu refers to it as.). So my set up would be Modem>Server>Switch>Router. I know that I need to set up it up as a DHCP server as well. I would also like to setup it up as a firewall too. I already have two Gbit cards that are already configured. So how do I do this? I already tried one tutorial, but it was old and was for Debian. I also installed ebox, but I couldnt figure that out either.

View 2 Replies View Related

Networking :: Capture And Log All LAN Traffic - No Access To Router Or Firewall

Jun 10, 2009

I am looking for a solution for our LAN traffic monitoring and would like to use some opensource linux application. I have a linux box with two NIC cards and what I thought is the following: Our setup is as follows. Internet comes in through the router and into the firewall. From the firewall it goes into our switch and distributed among the workstations.
I have no access to the router or the firewall as they are centrally configured. I would like to place a device into the loop through which I could monitor the LAN traffic.

Can I put a linux box between the firewall and the switch and have all packets going through registered and logged? I have a proxy server (non transparent) and that captures some but not all. I would like to get all packets registered without interfering with the LAN etc.

View 3 Replies View Related

Networking :: Building Router Equipped With Firewall And Acl Management?

Jul 6, 2010

I am trying to do my graduation project, it's labeled under "linux secure router", and I should build a linux based router equipped with firewall and ACL management...Some people advice me to use linux ubuntu distribution todo this I try to do that but I don't know where to start form

View 3 Replies View Related

Networking :: Unable To Open Port In Router Or Firewall?

Jan 26, 2010

I am trying to make a vnc connection from pc #2 to pc #1. Pc #1 is a debian pc behind a zyxel router (P-2602HW-D1A). Pc #2 is a windows xp pc another place at the internet.I have configured the zyxel router to forward incomming trafic on port 5902 to the local ip-adress of the debian box. The debian box is running a vnc server, listening on port 5902.But i dosn?t work.I have tryed to scan the zyxel routers ipadress on port 5902 from the internet, but the scanner says that the port is closed.The vnc server on pc #1 is working fine on the local network. I can connect to the server from a pc on the same side of the zyxel router.Is it deffenitly a router problem, or could it have something to do with debians own firewall?

View 2 Replies View Related

Ubuntu Networking :: Setting Up Network Firewall Using A Netgear DG834G Router

Jan 12, 2011

could set up a firewall on my linux machine? I have is to connect my router wired to the linux machine and then from the linux machine to my main computer, and obviously routing the internet connection through the linux box as a firewall. I use a Netgear DG834G router

View 9 Replies View Related

Fedora Networking :: OpenVPN Timeout - Error From NetworkManager - Connect To My Router/firewall

Mar 13, 2011

I'm getting a timeout error from NetworkManager when attempting to connect to my router/firewall.

Excerpt from /var/log/messages attached.

View 1 Replies View Related

OpenSUSE Network :: 11.2 Acting As Router Firewall

Mar 29, 2010

switched recently to 11.2 and it works fine for me as workstation I want to set up a router separating a part of the network and also acting as a firewall/proxy... Configured 2 Ethernet Interfaces, checked Ip forwarding in Yast but it does not forward the packets from the "internal" to the "external" network. Hovewer after I set up my router as default for machines on internal network I can ping the external interface but no adress on external network (particularly the one of the default router) !!! From the router I can reach both networks and the net via default gateway on external. Tried to:

a) switch firewall completely off
b) iptables -P FORWARD ACCEPT
c) masquarading internal adresses to the external network

my interfaces configuration looks like:
eth0 Link encap:Ethernet HWaddr 00:13:D4:E3:A2:7B
inet addr:192.168.1.34 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::213:d4ff:fee3:a27b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

[Code].....

View 4 Replies View Related

Ubuntu Servers :: Router With Wifi And A Firewall

Aug 9, 2010

My isp gave me a router which has wifi.

I added an ubuntu box acting as a router, so the layout is this:

Now, the lan has 192.168.2.0 subnet, and the external interface of the router is in the 192.168.1.0 subnet

So the problem is that the wifi assigns 192.168.1.0 ip's which doesnt belong or get filtered through my router/firewall...

View 9 Replies View Related

Ubuntu Security :: Firewall Without Router - No DHCP

Feb 15, 2011

I want to have a firewall that is connected to my modem and router and have it function as just a firewall no dhcp no routing is that possible?

View 3 Replies View Related

Security :: Is A Firewall Needed If Get All Traffic Through A Router

Aug 8, 2010

I get all my traffic from my router, as this computer seldom moves. So is there a use for a firewall?I am not sure, because when I scan my IP address with nmap, no matter what the changes I make in the firewall, it is always the same scan...cannot fingerprint OS...and all closed ports.The all closed ports thing only changes when i torrent, then i get a wide open port.

View 14 Replies View Related

Security :: Firewall Infront Of Router Setup?

Mar 9, 2011

I am trying to setup a firewall using Centos 5.5. The machine has 2 NICs, one connecting to the ISP/Modem and the other connected to a DIR-655 wireless router. The nic is connecting to the internet port on the router.

I do not want DHCP on the Firewall machine but on the wireless router.

[ISP/Modem]<--->[machine eth0]<--->[machine eht1]<--->[DIR-655 internet port]
IP from ISP Dynamic 192.168.1.1 192.168.1.2

IP's on the DIR-655 LAN will be 124.168.0.0/24 network lets say.

I have setup routes on the eth0 192.168.0.0/24 and 124.168.0.0/24
and added 124.168.0.0/24 to eth1.

I can ping eth0 and eth1 but cannot ping 192.168.1.2.

this setup is not actually connected to the internet so I disabled iptables to try testing the ping and still no good.

View 1 Replies View Related

Security :: More Secure Than Router's Not Configurable Firewall

Apr 20, 2011

There are routers with firewalls which you cannot configure - you just use those routers and get some protection from Internet attacks. Is it possible to configure iptables on GNU/Linux machine so that you'll get better protection than the protection you get from those kind of routers?

View 4 Replies View Related

Ubuntu Servers :: Firewall / Router Forward Ports

Sep 8, 2010

I have linux server setup on a network with 2 interfaces. One (eth0) is connected to the regular network and the other (eth1) has a DHCP server and transparent web cache listening on it. The machines connected on the eth1 side are on a different subnet and the linux server is there gateway. Untrusted machines are introduced to this network to keep them isolated.

This isolation works well, too well. There are a small set of resources on the regular network I would like to make available to machines on untrustworthy network. I think I need to use iptables but alas I've had no luck in piecing together the command I need (in one case looking myself out and having to physically reset the machine).

View 3 Replies View Related

Ubuntu Security :: Iptables Firewall Logs Router?

Apr 5, 2011

In an effort to learn more about firewalls and iptables I have left behind gui set-up tools and have setup a firewall using iptables that logs to its own file. The firewall is as follows:

Code:
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:TCP - [0:0]

[Code]...

View 8 Replies View Related

Ubuntu Servers :: Setting Up Gateway / Router And Firewall

Jul 20, 2011

So what I want to do is setup a gateway(or router, idk what Ubuntu refers to it as.). So my set up would be Modem>Server>Switch>Router. I know that I need to set up it up as a DHCP server as well. I would also like to setup it up as a firewall too. I already have two Gbit cards that are already configured. So how do I do this? I already tried one tutorial, but it was old and was for Debian. I also installed ebox, but I couldnt figure that out either.

View 1 Replies View Related

Ubuntu :: Ad Hoc No Internet - Firewall Not Active And Router Is Enabled

Nov 19, 2010

I am establishing ad hoc connection between two PCs

1. LAPTOP: WIFI adapter OS: Ubuntu 9.10 Connection name: trial Address: 192.168.1.36 Subnet: 255.255.255.0 Gateway: 192.168.1.1

2. PC with wired Internet connection + WIFI adapter OS: Windows XP Connection name and parameters same as above except ip: 192.168.1.40

I can see trial is getting connected with excellent strength. When i try to run an Internet on Ubuntu it is not working. Firewall is not active and Router is enabled.

View 1 Replies View Related

Hardware :: IPhone 3G In Modemmode - Router / Firewall Distribution

Sep 14, 2010

I want to connect my home network with the iPhone via UMTS to the internet. I'm searching a Router and Firewall Distribution, which is able to use the iPhone in modem-mode to connect to the internet.
Does anybody know such a Distro which can realize that?

View 2 Replies View Related

General :: Configure Centos 5.4 To Work As A Router And Firewall On Its Own?

Jun 15, 2011

how to setup centos to act as router and firewall at our office i just installed the os now i dont know where to go from here i have all the isp adresses,dns and gateway any assistance coz am really interested in learning linux thanxs iused some instructions on this site [URL] and when i try the /sysctl.config on my terminal now i get the message permission denied

View 5 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved