After seeing a few articles on making a home router I thought "I'll have a go at that" as I've spare bits and bobs lying around. Now apart form some iffy wireless cards one major problem sprung to mind. Clearly there will be 2 NIC - 1 in and in my case one out. And that one has to be wireless. But I've yet to find a ready built one (is Smoothwall or the like) that will allow me to do this with a wireless network card in the machine.
Firstly is it doable as all the traffic in my house is wireless. Secondly are there any ready built distros that will handle it for me.
I currently have an Airport Extreme connected directly to my cable modem but have been wondering if I should actually connect direct to my proxy server first. The reason I am asking is because I run multiple web servers for web hosting and I have a proxy server setup that directs traffic to the appropriate computer based on domain names.
I have my router connected to my cable modem, and then all of my computers are connected thru the router. To me it would make more sense to have my proxy server be the first to connect and then thru a second ethernet card connect to the router. I also have a 5 port switch on order as well. So basically I'm asking for opinions now, in preparation for making some adjustments to my network and servers.
I'm wanting to set up a network. I'm still confused as to how to set it up. I think the easiest design is to have a switch on my border router.n this switch will be the servers. Also attached to this switch will be a Linux box. This will be a dedicated firewall. On it will be another switch. And the machines on the internal network will be attached to this switch. In the book "building Internet firewalls"(o'reilly) this set up is described as a screened subnet architecture. However the external interface on the Linux dedicated firewall will have to get it's I.P via dhcp (192.168.1.*) from the border router.
That or it can be a static I.P on the same subnet as the border routers dhcp range 192.168.1.*(but outside the dhcp range) but that would be trickier.The internal interface of this dedicated firewall would be static and on a different subnet as the external interface (192.168.2.*). Then this internal interface could give out I.Ps to the internal network that are on 192.168.2.*. If it did N.A.T for packets from the internal network then N.A.T would be being done twice; once by the Linux dedicated firewall and once on the border router, before going off to the net.Or is it a better approach to NOT do N.A.T on the Linux firewall and have all I.Ps on the whole network assigned as static(outside of the border router's dhcp range, but all on the same subnet(192.168.1.*))?.
Basically is there any point in the Linux box doing dhcp and N.A.T for hosts on the internal network?. I guess the answer is no. But i just wanted to hear your opinions, if you have the time. The border router is a home router. nted to have a normal triple-homed dedicated firewall and put it in the border router's DMZ but it proved unpredictable and tricky. So i just wondered what the best I.P addressing scheme would be for my newer way.
I updated a firmware of my wifi router (small black box with antenna). The router is managed via web browser at address 192.168.1.100. I opened Mozilla Firefox connected to the router, but a 'home.asp' application - an interface one can to set up a configuration - running on the router didn't work properly. When I tried to change some settings, and eg. clicked a confirmation button nothing happened. I solved the problem staring Windows and making a connection using IE - this time that home.asp application did OK. The question is what may caused problems? A bug in this app or in general *.asp applications don't communicate well with browsers other than IE or simply they don't 'like' Linux?
How can I successfully SSH using SecureCRT from the Internet to my Centos Linux box at home behind the router? I have a DGL-4500 dLink router. I configured a Virtual Server in the router for SSH 192.168.0.182 Protocol 6 TCP public port 22 ? private port 22 Schedule Always Allow Inbound Filter Allow All. Further I Enable DMZ for 192.168.0.182. I got my Internet IP address through "what is my ip website." Now every time when I try to SSH, I get a message "The remote system refused the connection". Here is iptables -L command output;
I have set up many Dansguardian/Squid proxy servers. All of them have been on a network where I could use Microsoft Group Policies to force the proxy settings on each machine. The entire setup is quite easy, surprisingly robust, and reliable as hell.
My Dentist talked to me today and asked for something different. He wants to set his office up as a wireless hot spot for his patrons, and he wants their surfing directed through a proxy server. I plan on putting them on a completely different subnet and independent router. Now, since I won't have the convenience of GP I'm wondering if there is a way to force all internal Port 80 traffic through the Proxy server but obviously not the Proxy itself. I would like to use the router to do this and not the Linux box. Is there a low cost home router like Linksys or Netgear that will do this?
The garage in my house is a dead spot for my current wifi router.I can't get a signal there.Moving my router within the limits of my cabling doesn't fix it. But I have two other routers I'm no longer using.Is it possible to use one of them as a wireless access point to extend the range of my current router?If so, what is the general procedure for doing that? My main router is a Verizon Actiontec M424WR. My other unused routers are a D-Link and a Netgear, both of which have wireless capability. The Netgear had a superior range, as I recall.
the only error message I can find comes from "dmesg|tail"all it shows is "no IPv6 router"any body know what is going on here or where where to look for more clues the next time I get around public wifi Oh the windoze washers and apple polishers don't seem to have any problems at all
I heard that you can create a server from Ubuntu 10.10, even if it's not server edition. does anyone have a good guide to doing it in standard ubuntu? all i can find is on server edition where there's no GUI. or is terminal the only way? (im just setting up a basic home server for sharing pics and text docs, so i don't have to worry about security just yet. ill get to that some time later)
How do I stop one user account from being able to read files in another user account.
Right now once i log in, I can easily navigate to /home/[username] and copy/read any file. How do I make it thus that only /home/[username]/shared is allowed to be read/copied.
I would also like to prevent listing of directories.
Because of the configuration of my house, I need two routers.I have a DLink ADSL router as my main router and the Belkin N1 as my repeater.I have set up the IP address in the Belkin to be 10.1.1.10 - my DLink is 10.1.1.1. I have disable the dhcp in the Belkin and set the DNS as ISP provided. [URL]..I have set the channel to 11 and in the Ubuntu Network Manger I have set the IPV4 to Link Local Only. I can see the Belkin and connect with my PC.but it will not take me through to the internet.
I want to set up a Linux box as a wireless router to replace our existing Netgear WNR1000 router, as I believe the Netgear does not support the coming IPv6 protocol. Unfortunately, it is not flashable with OpenWRT or DD-WRT presently.
As we have Comcast, our cable modem acts as a dumb modem according to the customer support guy I talked to, and our router is the one that asks for the IP address from DHCP. Thus, when Comcast switches over to IPv6, I don't believe my existing router would work, correct?
My idea is to take a Linux box and put two NICs and a wireless adapter in it, using IPCop or Smoothwall to set up a router. I could then enable IPv6 support for when we have IPv6 with Comcast. Is that possible? Would there be a way to get BIND to hand out private IP addresses in the same subnet on the both the LAN NIC and the wireless card?
I have a desktop PC running Ubuntu 9.10 and Windows 7, and a Eee PC 701 laptop running EasyPeasy Ubuntu 9.04. I'd like to connect the desktop to the laptop with a wired connection (eth0), then the laptop to my ADSL router using wireless (ath0).
I have a crossover ethernet cable (I bought on ebay). I have set up my laptop with a static IP address on my LAN and it uses OpenDNS.
I have added this to /etc/sysctl.conf on the laptop:
This is a variation on what I found on other sites describing how to set up a router. I don't understand iptables very well, but I gather that the above two lines should set up forwarding so that traffic from my router to the laptop will be forwarded to the desktop, and vice versa.
But this doesn't work. The connection doesn't even establish between the laptop and the desktop.
I'm having trouble getting my network set up the way that I want it/had it. You see, when I first set up my network, I just had my cable modem going directly to my standard wired router (A D-Link DI-604), which had DHCP,and was connected to all of the computers on my network. I had one switch hooked up to one of the ports of the router, but this was a regular switch, and it would not try to assign IP addresses, it would just pass through the DHCP info as I wanted.
Now however, my network setup has changed. My room mate and I both got laptops, and we decided that we wanted to have wireless access so we didn't have to constantly plug in to the router.
Now my network is set up like this: The modem is hooked up to the router(DI-604), which is hooked up on the LAN side to our computers, our switch (which is hooked up to 3 more computers), and to a wireless router card (A Gigabyte GN-BC01).
The wireless router card has two jacks for ethernet. One for WAN, and one for LAN. The LAN side we have plugged only into the computer in which the card is installed.
Now the problem is this: The wireless router card comes with DHCP by default, and it's assigning addresses to the laptops and to the computer hat it's in, and worse, the IP addresses are on a different subnet than that of the main dlink router. The Main (dlink) router assigns addresses from 192.168.0.1 (itself) to 192.168.0.254, while the wireless router card assigns addresses from 192.168.1.1 to 192.168.1.254 (itself).
Because of this, I cannot access services on the wireless network from my wired network or vice versa. The first thing I tried was setting the card to assign addresses from 192.168.0.12 to 192.168.0.253, however it just said "internal error" when I tried to do this. I decided that this may be because it sees that it was being assigned an address on it's WAN side on the same subnet. So the next thing I tried was disabling DHCP and setting the "LAN IP Address" to 192.168.0.12, hoping that the DHCP would just go through the card, like a switch. I would have set the LAN IP address to be assigned by DHCP, but this was not an option, so I decided that'd be the best thing to set it to.
Once again however, setting the LAN ip address to an address on the same subnet as that of the IP assigned to it's WAN side caused it to report an "internal error". I verified that this was the issue by setting the LAN address to several other private IP addresses to test (I.E. 10.0.0.1, 192.168.3.1, 192.168.5.12).
My question then really is: How do I set up both routers so that I can access services and computers from each network from the other network. Should I set them with different subnets and set the gateway on the wireless network to the main router? To the wireless router card? Should I put them on the same subnet? Will it know how to communicate?
Here is a link to (picture) my network diagram. Network Diagram
My network is running a cable modem (ISP), router, then I have a laptop that host some services (ftp, etc). It would be nice if I could build a small computer that could also have an WAP. That way I could have a wireless router and NAS, proxy server all in one.
I obtained some old PC and I've installed debian linux on it. Now, I have onboard ethernet slot (10/100) and net works fine. Into PC's usb slot I've plugged Bus 001 Device 002: ID 0bda:8189 Realtek Semiconductor Corp. RTL8187B Wireless 802.11g 54Mbps Network Adapter and I want to know is it possible to transform this PC into wireless router for home use? If so, what do I have to do?
These r IP provided by my ISP that i've put on Fedora 8:
WAN IP:xxx.xxx.xxx.17 (eth0) Subnet:255.255.255.252 Gateway:xxx.xxx.xxx.18
Valid static(public) IP set of 2: IP:xxx.xxx.xxx.147 & 148 (eth1, eth2) Subnet:255.255.255.240
i want to run xxx.xxx.xxx.147 as a web server & xxx.xxx.xxx.148 as a ftp server. but I'm able to ping only xxx.xxx.xxx.17(WAN IP) from outside world. Can any1 tell me that how can i bring my 147 & 148 IP online without router.
So for ive changed the dns on my home router to Opendns and ive added this What does a dns attack look like? how would i know is my dns was poisoned or if i was under a kaminsky style attack?
Linux and have a western digital server (my book world edition) I can access it with Ubuntu 11.04, just by downloading Samba and then by clicking on network and the server shows up, but with Fedora 15, after I have installed Samba, I click on network and all that shows up is my router?
I am running openSUSE 11.2 and just recently my network has been down. I'm using Gnome, but using Yast to configure my network (I'm usually forced to use wireless as I travel a lot on my laptop). Usually, when I'm connected to a wireless network, it will show up as so in the Gnome start menu, but recently, it will only say Wired there, even though I have nothing connected to my ethernet jack. I can connect wirelessly to a home router, but cannot use the wireless in any other way. I have tried manually disabling the ethernet connection to no avail. Unfortunately I am limited in my linux knowledge, so I am kinda stuck here.
I just installed WUBI and tried to connect to my home router but am unable to. I can connect to nearby unlocked routers, but am unable to connect to mine which is WPA-PSK [TKIP]. Also, this is the first time I've even seen Ubuntu
I would like to setup a qmail server for learning purposes (if you strongly feel Postfix is better, feel free to let me know). When I started setting up qmail (using Life with qmail), it suggested that having a DNS is the best approach. In the spirit of learning, I decided then to create another server for DNS only, and use that for qmail.
My problem is that, as this is a home installation, the internet is behind a Netgear DG834Gv5 router, on a DSL line that has a dynamic IP address. I am using DynDNS, but also don't mind having to update any DNS entries to keep up with the change, this is not exactly a production-grade setup.
In addition, I also have access to another DNS server where I can create authoritive entries for any domain I register. I have done that for a domain, and would like to point part of that to my home DNS so that I can learn.
So essentially, I would like to have a new zone for home.mydomain.org on my home DNS so that I can create new entries for *.home.mydomain.org such as qmail.home.mydomain.org etc. there.
I assume that this would include port forwarding on the router which is not a problem, but I truly have no clue where to start. I have a very basic install of Cent-OS 5.3 (no X and just Base a few admin and dev tools) and just installed the latest RPM of bind (9.3.x).
I've moved a linuxbox from being my gateway (nat, etc) to behind a new gateway (a DD-wrt router). For transparency purposes, I'd like to continue using the old box services, and just have the gateway in front of it.
Here's what I did:
The newgateway is setup for class C, 192.168.0.0
This configuration works, but sometimes it doesn't and I haven't figured out why yet.
At sometimes, clients on the LAN get throughput rates with very little speed loss (using speakeasy speed test). They will run at 33M on the LAN, running through both the newgateway, and the oldbox, and get about 35M with directly connected to the cable modem.
Other times, it seems nothing can talk with anyone, and I am not sure why.
I know what I have done is a little unconventional, but it's a transitional thing, and I am not sure it is the cause of the problem, although it was the last things changed.
My son lost his USB Wireless stick for his Computer. I had thought I heard that if you had a second wireless router, you could use it somehow to detect the wireless router you have already set up in your home (like using a wireless card)? Is this what Ad-Hoc is? Either way, can this be done and if so how? I use a WRT54Gx2 Lynksys router and have a TRENDNET TEW-432BRP wireless router and also a spare D-link DI-514. I use ubuntu 10.04, and also wanted to know if I connected one of the router to his on the LAn port could he connect msaybe through an Ad-Hoc on my local computer here? He uses XP on his. I'm a newbie to linux and networking in general.
I moved my server and network equipment, and now the wireless works but I cannot get my server online. I host a website, so this is kind of urgent.
I have a wireless router and can access the internet fine on my laptop. My server is wired & connected to the router. It sets up the networking properly.. ifconfig has an ip address, the default gateway is present. But I cannot ping google, or even the router. It says destination host unreachable.
So I go back to the laptop to check the router settings.. sometimes it likes to assign the server the wrong internal ip. But, I can't access the router settings either! The page (192.168.1.1) times out. Same with trying to ping the router. How can the laptop be online if it can't reach the router?
Oddly, ifconfig on my laptop reports an ip address starting with 99.233. It's always given me an internal address starting with 192.168. What's going on here? Is the router not allocating an internal ip? I use wicd to connect, if it's relevant.
We have a windows laptop that can only get a "local connection". Now it does sound like the router is forwarding directly to my laptop, instead of allocating internal ips.
I am thinking of moving the router behind a server and connecting the server directly to the internet via a modem. Are there any security issues related to doing this? or other things I should be aware of. Iptables are implemented on the server blocking access on unused ports.
