similar to: More about firewalling

Hi All, I have a home business circuit and I am gearing up to host my business affairs in my place. I have Comcast and 13 static IP's. I have an extra PIII 1U, 2 9gb SCSI, 1gb RAMm dual NICS. So I am wanting to build a firewall to front end my traffic. Assign one of my statics to it and have Comcast statically route my traffic to this IP. Then when traffic comes have it decide if it

Hi All, I want to build a dedicated firewall/router as I am launching a NPO and I can host this in my garage. (Comcast offered me a 100 x 20 circuit for $99/mo with 5 statics) I used to run Untangle, but as of version 9, you are forced to use their build in protocol policies versus the firewalling I am used to (Deny All and then opening holes for specific IP's, etc). There are so many

Hi All, Sorry, I am still confused about implementing a firewall without having my ISP static route all of my traffic to my public IP's to a single public IP. So before when I have done this for work all traffic has been statically routed. Now I have a comcast modem and it is 'pass through' so traffic for all my 13 IP's is allowed and I have to decide what to do. So I

Hi, My customer has a outdated firewall that is also presenting a NAT nightmare for getting the Asterisk server reachable from the internet. What firewalls work good with VOIP? I really want to steer away from any ALG supported firewall. I just want a good firewall that works well with Asterisk. Thanks, David Wathen -------------- next part -------------- An HTML attachment was scrubbed...

HI All, Can anyone explain why I might want to run my own DNS Server in-house? I have a comcast business circuit and use their DNS servers and when I need entries, I use GoDaddy where I buy my domains. Best, -ML

Hi All, So my electricity bill is through the roof and I need to pair down some equipment. I have a CentOS 6.5 Server (a few TB, 32gb RAM) running some simple web stuff and Zimbra. I have 5 static IP's from Comcast. I am considering giving this server a public IP and plugging it directly into my cable modem. This box can handle everything with room for me to do more. Doing this would allow

Hi All; Can I run the IAX on TCP port instead of UDP port? If I ran IAX in TCP port, and in case my network was having a lot of users doing browse on the internet and downloading, so in that case and if the IAX used TCP port, so the voice will be better than using UDP (because in TCP the lost packets will be resend while in TCP it will not which will cause the voice to be cutting)? Same thing

Hello in one of the emails I sent earlier ; mark (m.roth at 5-cent.us) mentioned: > install linux on a computer with two ethernet cards. connect eth0 to > your internet connection, and eth1 to your local network. configure > iptables firewall rules in the linux system. or install pfsense on that > same computer. Please if any one can help with more details and

A few weeks back I had tried to install CentOS on my old AMD 5x6x (equiv to P75 performance) with plans to use it as my firewall and router. Because there were some problems relating to RPM compile architecture (apparently), I posted and Bryan suggested IPCop, even at peril to his life on these lists ;-) according to him. ;-) ;-) Just wanted to tell him thanks, it's worked out well. Had

Hello everybody, for just one week I try to install three servers on an OpenSuSE 10.3 dom0 equipped with 4 NICs. One server is an OX using the onboard NIC via xenbr0. This server runs!! For my IPCop server I intended to use the three remaining NICs (Intel Pro100/S, 3Com 3C590, Realtek RTL-8139). These three NICs should be used natively by my IPCop. So I tried to use the pciback driver. I wrote a

OK, I am confused and DNS is the reason. So, Comcast, 13 public IP's bound to my modem. Each public IP has a DNS name from comcast (they assign it automatically) like: 173.13.167.209 --> 173-13-167-209-sfba.hfc.comcastbusiness.net I created a DNS entry at GoDaddy for 173.13.167.209 that is 'inhouse.theindiecompanyllc.com' When eth0 is alive, I see that it tells me my name

Well FWbuilder is NOT easy. The documentation does not match the current GUI. Now the box is locked up. I will have to pull it again, hook it up to a kybd/VGA and reset iptables.... Maybe Shoreline with webmin.... Problem is I want a REAL router/firewall with little work. Both public and private nets have routable addresses. No NATing for me! I just help write the RFC ;) And all the

Hi All, I did a clean install of CentOS 5.3 yesterday. During setup I activated both adapters on startup. etho is my public IP and eth1 is my private/internal IP. It did not let me specify nameservers though. So I know this is resolv.conf. I know I put in: nameserver xxx.xxx.xxx.xxx nameserver xxx.xxx.xxx.xxx But how do I put in nameservers for specific networks? Example, I want my

Hi, I have tried unsuccesfully to limit my ftp server send speed in linux. I have an ipcop linux firewall/router with 2 nics. 1 nic (eth1) is connected to a 3mbit/384Kbit cable connection and the other (eth0) a switch. Behind it i have a suse linux box and a windows box. On the suse box i run proftpd. I need to shape my passive ftp send speed to 34KBytes because if it is maxed out at 45K

We are looking for a good firewall replacement which will basically do pot blocking and QOS. Our current solution just plain stinks.. We basically need to handle the traffic of a few web servers, mail server and asterisk box. The most traffic this device will need to handle is what can be shoved through a T1. I don't mind buying an appliance to get something solid but IP Cop just looks

Hi List, I am looking for 1U firewall hardware, any ideas? Something like that (http://www.applianceshop.eu/index.php/firewalls/opnsense/opnsense-pfsense-ghz-19-appliance-1.html) but at least with 5GBit nics and more memory. -- Eero

Currently, i have nodes with PMTUDiscovery =yes and ClampMSS = yes. When the server does not receive a PMTU request back from one of the clients even when the packet size is very small (say 164), then it reverts to TCP. Should i turn off PMTUDiscovery or should it be ok to leave on? It takes a very long time to do simple pings (1 second or so), so i wonder what else i can do?

HI All, How fast does a a small DNS Server need to be? I will have about 10 servers and a few workstations. I have a few older Compaq PIII boxes with 1gb RAM each or I have faster P4 boxes. Same question as above, just a Vyatta type device, Firewalling....? -ML

Hello all, first of all i'd like to wish you all happy holidays, and a merry belated christmas. Secondly, i'm trying to setup? a centos 5.4 to act as: 1. firewall # can you check my config below and tell me if i missed anything? 2. DHCP # already configured 3. transparent squid proxy #? already configured 4. http (virtual hosts) # in the near future 5. squirrelmail # in the near future

Hi All, My Samba server/firewall has three (two real, one virtual) network cards: eth0.5: connects to a terminal server eth0: internal network with about 10 XP workstations eth1: the Internet Samba is set to talk to only 12.0.0.1, eth0.5 and eth0. I have my firewall iptables rules set so that users on eth0.5 can only use the samba server on my server. They can not share with any other user on