[Cialug] Firewall question

[Scott Yates]

I am still a big fan of pfsense:

https://www.pfsense.org/download/

It has commercial support if needed, but the community edition is all I
use, and it is VERY easy to set up with its web interface.

On Mon, Mar 6, 2017 at 4:57 PM, Tom Sellers <tsellers2009 at gmail.com> wrote:

> Thank you for your response!  I have looked briefly at the link you sent.
> Is there a way to look at the existing firewall setup?  My impression of
> this firewall was that it was for the most part already configured after
> you ran the setup.  Here is the link to the internet instructions for this.
>
> https://www.engadget.com/2006/05/30/how-to-build-your-own-
> network-firewall/
>
> The firewall runs from a CD rom and only uses a USB to store settings.
> After my experience so far, I would say the instructions are not very
> complete.
>
> I am open to a different firewall option that would run on an older piece
> of hardware since most of my hardware is not very up to date.
>
> Thank you again!
>
>
> On Mon, Mar 6, 2017 at 4:36 PM, David Champion <dchamp1337 at gmail.com>
> wrote:
>
> > There are a few things you need to do, like turn on NAT. Here's one
> example
> > of how to do that.
> >
> > http://www.revsys.com/writings/quicktips/nat.html
> >
> > There are several linux and bsd distros specifically designed to act as a
> > firewall with a nice front-end on them. Some distros may also have a
> config
> > option like "network connection sharing" that will do these things for
> you.
> >
> > You'll want to get familiar with iptables and / or shorewall if you're
> > going to run your own linux firewall.
> >
> > -dc
> >
> > On Mon, Mar 6, 2017 at 4:24 PM, Tom Sellers <tsellers2009 at gmail.com>
> > wrote:
> >
> > > I am trying to insert a firewall between my cable modem and my wireless
> > > access point.  The firewall is just a computer running a linux variant.
> > > (Devil
> > >
> > > I can ping the outside world from the firewall machine keyboard and
> > resolve
> > > pings such as "ping www.yahoo.com" fine. The problem is that none of
> the
> > > machines connected to the wireless access point either by wire or
> > wireless
> > > have any address resolution or internet access.
> > >
> > > Right now I have the network attached to my existing network for
> testing.
> > >
> > > For example:    Existing home network ---- firewall machine --- new
> > > wireless router --- 3 test machines (two wireless and 1 cabled)
> > >
> > > The firewall gets a DHCP address from my existing network as it would
> > from
> > > my cable provider.  The other side of the firewall is set up with a
> fixed
> > > IP connected to one of the ports on the new wireless router
> > (192.168.9.254)
> > > (wireless router is 192.168.9.1).
> > >
> > > I am not that familiar with all the command line IP commands but can
> > verify
> > > the IPs of the various devices.  it seems to me there is a route
> missing
> > > that prevents the internal IP from talking to the external IP of the
> > > firewall.
> > >
> > > Anyone out there that can enlighten me as a somewhat inexperienced
> linux
> > > user?
> > > _______________________________________________
> > > Cialug mailing list
> > > Cialug at cialug.org
> > > http://cialug.org/mailman/listinfo/cialug
> > >
> > _______________________________________________
> > Cialug mailing list
> > Cialug at cialug.org
> > http://cialug.org/mailman/listinfo/cialug
> >
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
>