I need to restrict access to the internet and keep unwanted software out of LAN with 45 workstations at the school I teach at. I thought about configuring a proxy and firewall on SuSE 11.4?
View 9 RepliesI've searched a lot across the web and this forum in particular, but wasn't able to find the solution. The settings of the firewall are too cryptic to me. When the firewall is turned off everything is OK, but it is uncomfortable to turn it on and off every time I watch IPTV.
View 8 Replies View RelatedI will be relocating to a permanent residence sometime in the next year or two. I've recently begun thinking about the best way to implement a home-based network. It occurred to me that the most elegant solution might be the use of VM technology to eliminate as much hardware and wiring as possible.My thinking is this: Install a multi-core system and configure it to run several VMs, one each for a firewall, a caching proxy server, a mail server, a web server. Additionally, I would like to run 2-4 VMs as remote (RDP)workstations, using diskless workstations to boot the VMs over powerline ethernet.The latest powerline technology (available later this year) will allow multiple devices on a residential circuit operating at near gigabit speed, just like legacy wired networks.
In theory, the above would allow me to consolidate everything but the disklessworkstations on a single server and eliminate all wired (and wireless) connections except the broadband connection to the Internet and the cabling to the nearest power outlets. It appears technically possible, but I'm not sure about the various virtual connections among VMs. In theory, each VM should be able to communicate with the other as if it was on the same network via the server data bus, but what about setting up firewall zones? Any internal I/O bandwidth bottlenecks? Any other potential "gotchas", caveats, issues? (Other than the obvious requirement of having enough CPU and RAM).Any thoughts or observations welcome, especially if they are from real world experience in a VM environment. BTW--in case you're wondering why I'm posting here, it's because I run Debian on all my workstations/servers (running VirtualBox as a VM for Windows XP on one workstation).
I'm looking to setup a web proxy using squid.I already have a hardware firewall NAT'ing device that all the connections go through.I'm planning to install the squid web proxy on a VM (single nic) and place it behind the hardware firewall as below:internet -- modem -- Firewall --switch--squid proxy (192.168.10.100)--client workstation ((192.168.10.200)(client workstation is connected to the same switch as the squid proxy)And on the client workstation's Internet Explorer: Tools->Options->Connection-Lan Settings and check the box for "Use a proxy server for your LAN then type the address of the squid proxy (192.168.10.100) and set the port to 3128. Check the box for Bypass proxy server for local addresses.
View 1 Replies View RelatedI am encountering problems to configure my firewall (through iptables) to allow apt-get features, like update and install.I have the latest debian server running in a virtual machine in my windows xp and therefore I have two interfaces in this debian server:- NAT Interfaceinet: 10.0.2.15- Host Only Interfaceinet: 192.168.56.101So far my iptable rules drop all packets for default, in exception icmp and ssh that I allow to ping and connect from my windows xp. Both of them I use only the Host interface (192...) to connect to another 192... interface on my windows.
Those are working fine, but apt is not. I know, in this very moment it shouldn't. But I made a lot of attempts trying to configure the iptables allow connections through the 80 and 21 ports from/to NAT and Host. I think I made all possible combination (or not, because it didnt work). But I'm wondering if someone more experient can help me solve this problem.
I'm stuck at server with OpenNA installed, which has no relation with CentOS but If anyone knows GIPTABLES firewall to point me somewhere I can get configuring.I need to open 2 custom ports but I just can't get it to work.
View 2 Replies View RelatedI have tried various rules, like opening port 53 for the DNS with little success. I finally figured that you need to set the source port to 53 and NOT the destination port.However, I have been unable to figure out what ports apt-get requires. The only way I get it to work is to accept everything in iptables.
View 1 Replies View RelatedI have centos with software firewall enable , but i want to set up hardware firewall can anybody guide how to install and configure hardware firewall in centos
View 3 Replies View RelatedI have a question about telnet.Is there any way to configure a telnet server without disable firewall.I am using redhat 5.2 and fedora 12.I have lack of knowledge about firewall.
View 1 Replies View RelatedI am running a centOS 5.5 server and can't synchronize with time servers via ntpd. My server sits behind a firewall with only port 80 open and I suspect this is the issue. Do I need to open other ports to connect to the time servers at [URL]?
View 4 Replies View Relatedran an internet cafe and last week my windows server got fried because of power surge. Now i got Fedora 14 running on another PC and i want to set it up as a full caching proxy server, so other computers can connect through it to the internet. I have 2 network cards inside.I'm really new to Linux and now learning my way around. I managed to install squid but don't know how to configure it to suit the purpose above
View 1 Replies View RelatedThe problem is that he did not specify exactly where in /etc/profile. I am trying to make a custom spin of F12 but I cannot do it behind the proxy as it is now.
View 4 Replies View Relatedhow-to configure squid proxy server. I still haven't been able to find a solution. I want to set up squid as a open http proxy server. So people from other networks can connect through the proxy without having to login.Do I have to use iptables to reroute http traffic to squids proxy port? I have forwarded the port in my ISP modem so I know thats working, its the squid config that has flaws or iptables locally.
View 1 Replies View Relatedi am after proxy server, i add the proxy server access username and password
[Code]....
it said the export is succecefully done, but after trying to install something using yum, its give me this [root@locVirtual-linuxtest etc]# yum install samba
[Code].....
Am using Fedora 15, in which i was able to configure the proxy server and authentication. i confirmed this by configuring web broswer and it works. Now the problem is that i want to deploy it out to other computer system(client) i dont want to use the transparent proxy because the Proxy Authentication will not work.
I even tried to configure a DHCP server if it will work but i cant still configure for other computer system to work.
I'm trying to configure a reverse proxy for Oracle Database connections. What I have:
Host outside --> Reverse proxy --> Oracle Database
The "Revese proxy" has two IP, one for local and another for outside.I've tried with iptables, but unable.Now I'm trying with "redir".When I do a tnsping database, it works and says OK. But executing sqlplus user/pass@database, it tries to connect but time later I receive a timeout. What i do is a redir from port 1521 in "Reverse proxy" to 1521 in "Oracle database" why this doesn't work or any other way to do it?
how to implement proxy server with firewall and the client users should be authinticated by asking username & password while opening their web browsers and finally i want to see the websites visted list of all the client computers On cent os 5.3
View 1 Replies View RelatedI wanted to implement a server for a small network, but am a bit in-experienced. The server that I want to use should be able to do load-balancing (two connections) and also act as firewall/proxy. And also it should be able to do some bandwidth management. The network that its going to serve has two parts. One part of the network should be served, say during day time,and the other during night time. The one that is going to be served at night-time should not have access to internet during day-time, but should have access to, say local mirror-server. I am a bit confused what software/hardware to use. I am planing to use EndianFirewall, but since I don't have experience, don't know if it can do all that I need (?).
View 1 Replies View RelatedI need to set up my centOS computer as a firewall in my home network. Ive got 2 interfaces, eth0 and eth1. I want to allow and forward all traffic on eth0 and block all traffic on eth1 except ssh, ping(icmp) and DNS. How do I do this? Ive tried some editing in /etc/sysconfig/iptables but no luck.
View 1 Replies View RelatedI think I have encountered a problem in the way that lucid handles proxy servers. I was having problems running apt-get update due to a firewall at my work. I also noted that I was getting 403 Forbidden for wget. So I went to System -> Preferences -> Network Proxy from my account (which has administrator privileges) and input the http address for the proxy server, and then clicked the button to "Apply Systemwide...".
Following that change, wget worked from my account, but whenever I tried to sudo apt-get update, I got the 403 forbidden response again, even though I could wget the same files that apt-get reported as forbidden. I figured that this was a problem with the root account, and so I typed
Code:
However, upon exiting from the root account, and trying to run sudo apt-get update again, I got the 403 forbidden code again!
So, it seems that the proxy settings are not being applied systemwide.
If this gets moved I apologize for putting it in the wrong place...Purpose of server: RED GREEN ROUTER for SOHO or PARENTAL CONTROL Block known bad URL,IP... ie porn, malware, ads, others Block Good URL,IP if Desired by OWNER Scan mail protocols for viruses out and in if out is found log and mail MASTEROSSIBILTY??? scan all protocols in and out for viruses n block log out block log and mail MASTER a server build log and possibly a step by step assist for new users.Version of ubuntu server 10.04Hardware Gateway Pentium 4 2 network cardsUse of server RED GREEN ROUTER FIREWALL that blocks site list from shalla and my own list. general use would be for SOHO or Parental controlpick language...pick it again???...country...no...country for kb...kb layout...eth0(as RED)me it...timezone...HDD choice(i used guided-use entire disk)...user...proxy if needed(not for RED GREEN ROUTER!!!)...updates(i picked auto)...LAMP,openssh, mail server ...sqlpassword...grub...done
then
login as user/pass created in install
run following
[code]...
I have a firewall / proxy that has an extremely high load, but I can't figure out what's using it. No real cpu usage, the disks are sleeping except for a little log activity, it's on gigabit ethernet and not close to maxing out... Command link stuff runs fast, nothing seems slow, yet the load is sky-high. IME this kind of load is associated with a lot of disk I/O, but that's not the case here. What could be causing this, what else factors into the load?
uname -a:
Code:
Linux myfirewall.mydomain.com 2.6.8 #1 SMP Mon Oct 18 11:20:22 CDT 2004 i686 i686 i386 GNU/Linux
top:
Code:
07:55:43 up 1503 days, 17:13, 5 users, load average: 26.50, 26.33, 26.25
Tasks: 245 total, 2 running, 243 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.6% us, 1.1% sy, 0.0% ni, 95.0% id, 2.7% wa, 0.2% hi, 0.5% si
Mem: 3895508k total, 3582272k used, 313236k free, 207468k buffers
Swap: 2040244k total, 112664k used, 1927580k free, 1358744k cached
I am learning to setup firewall in my home for that i have selected four system(sys1,sys2....sys4) for testing .I have configured sys2 to act as a firewall with two NIC. sys3 and sys4 are inside the firewall . sys1 is not connected to firewall for testing purpose.
the IP assignments are follows :
sys1 : ( fedora, not connected to firewall i am thinking, But i am not sure )
IP : 192.168.2.1 ,
gateway : blank
dns1 : blank
dns2 : blank
sys2 firewall ,IPTABLES )
code....
what happened is that sys1(not connected to firewall) can ssh to sys4(connected,inside firewall),since the rules are written not to ssh form sys1 to sys4..
then I came to know whatever the request I give, It directly goes as sys1 --> sys4. Not as sys1-----> sys2(firewall)---> sys4 .and the firewall is not filtering and processing anything for both inbound and outbound (i think it's my mistake some where). the requests are directly going inside without firewall.
I've setup vnc over ssh tunnelling however the Suse firewall seems to be blocking it. On the local host I have this in ~/.ssh/config:LocalForward localhost:5900 remotehost.com:5900 The problem is that this only works when I either disable the firewall or add an exception for VNC. Both of these actions defeat the whole purpose of ssh tunnelling since they leave my VNC port open to the outside world (very insecure).
View 2 Replies View RelatedWhich is the best firewall in ubuntu10.10 and how to configure it so that hackers do not get access to my computer, I also do use torrent.
View 4 Replies View Related.i need to configure squid in my company how to install and configure squid in my SUSE server...
View 2 Replies View RelatedI setup Mediatomb on another box in my house to connect to with XBMC. XBMC will only connect though if the firewall is off on the local machine. I have both TCP and UCP ports 1900 and 50500 (the port for Mediatomb) enabled on my laptop (local) and the correct ports are open on the remote machine (my wife's vista laptop will connect through XBMC). I can connect to Mediatomb through it's web interface (to set visible folders/files) but not through UPnP (at least not through XBMC)
View 9 Replies View RelatedHow do I configure the firewall? Is there a firewall or do I have to install one? I cant find a app anywhere in the menu. Running 10.10
View 5 Replies View RelatedHow do I configure a spare pc as a firewall for my home and what distro would I use?
View 1 Replies View RelatedI working with open suse 11, and i have to create a proxy server using this O.S, so i bought a encore ENL832-TX-EN (an ethernet card), but suse didn't find the drivers, i read many documents and visit forums, but i can't do it.
I try this:
apt-get dist-upgrade
#make all
#insmod ./sundance.ko (or sundance.o)
#ifconfig eth0 xxx.xxx.xxx.xxx netmask yyy.yyy.yyy.yyy
eth0 is your network adapter,use dmesg to check it, ex: eth0, eth1...
xxx is your ip address, ex: 192.168.102.211
yyy is your netmask address, ex:255.255.255.0
that is from the notes in the cd that comes in te box with the card, but when i typed "make all", a error appers, something like doesn't exist, so I typed : " apt-get install build-essential linux-headers-$(uname -r)" (because I found it in some forum), then this: " apt-get install build-essential linux-he", and that didn't work, I did many this like:
"sudo apt-get update" and went to yast and look up for c/c++ demeloment (installing everything about it) and all about apt updates...