- WLUG - wlug.mailman3.com

Re: [Wlug] Firewalls

by Theo Van Dinter

On Mon, Apr 02, 2001 at 09:36:43PM -0400, Michael Long wrote: > of time trying to recreate something that probably already exists. Does > anyone have any experience with either open source or commercial firewalling > products that can be configured to work in a small office network and allow > VPN connections to larger networks. I do not have a very big budget but would define "VPN connections". do you mean IPSec, or some third-party (ie: proprietary) VPN connection? If you want IPSec, you can look at FreeS/WAN which interoperates with several different vendor's IPSec implementations. (http://www.xs4all.nl/~freeswan/) As was mentioned, PPP over SSH works (klugy, but I've done it and it works fairly decently) as well. ipchains/iptables will take care of your firewalling needs. VPN is a completely different puppy though. -- Randomly Generated Tagline: "So Lone Star ... Now you see that evil will always triumph because good is dumb." - Space Balls

April 3, 2001

Re: [Wlug] Firewalls

by Leon Do

you may want to look into the compact Coyote Linux solution. They are easy to configure and the entire package is on a single floppy disk provide more secure to your network. They are available for free or commercial Here are their features: DHCP Connections Static IP Connections PPP Dialup PPPoE Connections DHCP Server IP Chains Firewalling IP Auto-forwarding Linux Floppy Builder PPTP Client Support Their web site is http://www.coyotelinux.com "Brian J. Conway" wrote: > > > After spending many hours this past week trying to understand ipchains and > > firewalling in general I have come to the conclusion that I am spending a lot > > of time trying to recreate something that probably already exists. Does > > anyone have any experience with either open source or commercial firewalling > > products that can be configured to work in a small office network and allow > > VPN connections to larger networks. I do not have a very big budget but would > > be willing to pay for the appropriate solution. > > The approach I use for my home network is with masquerading a set of > 10.x IPs. For a configurable office solution I would recommend > something commercial or at least far more complex than what I have in > use, but my ipchains setup is as follows, for reference: > > /sbin/ipchains -F > /sbin/ipchains -P forward DENY > /sbin/ipchains -A forward -j MASQ -s 10.0.0.254/24 > /sbin/ipchains -M -S 43200 120 300 > /sbin/modprobe ip_masq_ftp > /sbin/modprobe ip_masq_cuseeme > /sbin/modprobe ip_masq_irc > /sbin/modprobe ip_masq_quake > /sbin/modprobe ip_masq_raudio > /sbin/modprobe ip_masq_vdolive > /sbin/modprobe ip_masq_user > /sbin/modprobe ip_masq_icq > /sbin/modprobe ip_masq_msn > > For VPN-type connectivity I use ppp-over-ssh (search google, there are > plenty of howto's on it), but that's more of a hack than a useful > solution, though a clever one at that. =) > > Brian J. Conway > dogbert(a)clue4all.net > Geek for hire: http://clue4all.net/resume > > Men may control the free world, but women control the boobs. > (http://www.pvponline.com/archive.php3?archive=20001024) > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -- Leon Do Lucent Technologies eServices Group 200 Lucent Lane Cary, NC 27511 email: leondo(a)lucent.com fax : (919) 463-4379 ph : (919) 463-3149

April 3, 2001

Volunteers needed!

by Andy Stewart

HI gang, I have been asked to be the guest speaker at the Delphi Developers Group meeting in Newton, MA on Monday, April 23rd (http://www.discom.com/delphi) They are interested in Linux due to the recent product announcement of Borland Kylix (http://www.borland.com/kylix) These folks are a group of software developers living in the Windows world. I had planned to prepare a 45 - 60 minute talk, Q/A, and then demonstrate some apps for them, such as: StarOffice Netscape Developer tools and utilities VmWare LILO Desktops - KDE, Gnome, enlightenment, etc. Installation of Linux The above list was suggested to me by their representative as a list of things that would be interesting to their developers group. I am seeking 2 or 3 people would like to volunteer to demo some of these tools at the meeting, and who can provide support for the questions which I can't answer. I'm looking for folks with systems or laptops that they are willing to bring to this meeting for the demos. I would also appreciate a volunteer or two who would be willing to critique my presentation slides before the meeting. You would not need to actually attend the meeting. I'd e-mail the slides to you and request your written feedback. The Delphi group representative will also get a sneak preview. If you are interested in either of these opportunities, please contact me this week if at all possible. Thanks in advance! Andy -- Andy Stewart, Founder -o) | Harris's Lament: All the good ones are Worcester Linux Users' Group /\ | taken. Worcester, MA, USA _\_v | http://www.wlug.org |

April 3, 2001

Re: [Wlug] Firewalls

by Brian J. Conway

> After spending many hours this past week trying to understand ipchains and > firewalling in general I have come to the conclusion that I am spending a lot > of time trying to recreate something that probably already exists. Does > anyone have any experience with either open source or commercial firewalling > products that can be configured to work in a small office network and allow > VPN connections to larger networks. I do not have a very big budget but would > be willing to pay for the appropriate solution. The approach I use for my home network is with masquerading a set of 10.x IPs. For a configurable office solution I would recommend something commercial or at least far more complex than what I have in use, but my ipchains setup is as follows, for reference: /sbin/ipchains -F /sbin/ipchains -P forward DENY /sbin/ipchains -A forward -j MASQ -s 10.0.0.254/24 /sbin/ipchains -M -S 43200 120 300 /sbin/modprobe ip_masq_ftp /sbin/modprobe ip_masq_cuseeme /sbin/modprobe ip_masq_irc /sbin/modprobe ip_masq_quake /sbin/modprobe ip_masq_raudio /sbin/modprobe ip_masq_vdolive /sbin/modprobe ip_masq_user /sbin/modprobe ip_masq_icq /sbin/modprobe ip_masq_msn For VPN-type connectivity I use ppp-over-ssh (search google, there are plenty of howto's on it), but that's more of a hack than a useful solution, though a clever one at that. =) Brian J. Conway dogbert(a)clue4all.net Geek for hire: http://clue4all.net/resume Men may control the free world, but women control the boobs. (http://www.pvponline.com/archive.php3?archive=20001024)

April 3, 2001

Firewalls

by Michael Long

After spending many hours this past week trying to understand ipchains and firewalling in general I have come to the conclusion that I am spending a lot of time trying to recreate something that probably already exists. Does anyone have any experience with either open source or commercial firewalling products that can be configured to work in a small office network and allow VPN connections to larger networks. I do not have a very big budget but would be willing to pay for the appropriate solution. Mike

April 3, 2001

Re: [Wlug] Firewalls

by Doctor Orbitz

ipchains/iptables will do what you want. I forget the actual syntax, but you just canmaek a script (traditionally caleld rc.firewall) in your startup scripts and have ti run ipchains/iptables with the correct info. I can find out what the correct syntax is if you ened it. You can prolly do ipchains --help or iptables --help (for 2.4.x) These are free solutions btw. Orbitz Michael Long wrote: > After spending many hours this past week trying to understand ipchains and > firewalling in general I have come to the conclusion that I am spending a lot > of time trying to recreate something that probably already exists. Does > anyone have any experience with either open source or commercial firewalling > products that can be configured to work in a small office network and allow > VPN connections to larger networks. I do not have a very big budget but would > be willing to pay for the appropriate solution. > > Mike > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

April 2, 2001

Re: [Wlug] Startup issues

by Michael Long

Thanks, making it executable seems to have done the trick. On Monday 02 April 2001 00:55, you wrote: > > From: Michael Long <michaellong(a)charter.net> > > > > I have been playing with my network settings today and have made a > > change that has caused my system to be unable to read this file > > during boot up. Also any script that tries to read from it is unable > > to. Unfortunately I have no idea what I did to cause this. The > > following is the out put from 'ls -l' > > > > -rw-r--r-- 1 root root 235 Jan 30 19:59/ > > etc/rc.config.d/idedma.rc.config > > Looks readable to me. Can you 'cat' it? (or 'more' or 'less' it?) > Are you sure the script is not trying to _execute_ it? > > > I am running SuSE 7.0. > > I'm not, so I don't have that file. Or even that directory.

April 2, 2001

Re: [Wlug] Startup issues

by Keith Wright

> From: Michael Long <michaellong(a)charter.net> > > I have been playing with my network settings today and have made a > change that has caused my system to be unable to read this file > during boot up. Also any script that tries to read from it is unable > to. Unfortunately I have no idea what I did to cause this. The > following is the out put from 'ls -l' > > -rw-r--r-- 1 root root 235 Jan 30 19:59/ etc/rc.config.d/idedma.rc.config Looks readable to me. Can you 'cat' it? (or 'more' or 'less' it?) Are you sure the script is not trying to _execute_ it? > I am running SuSE 7.0. I'm not, so I don't have that file. Or even that directory. -- -- Keith Wright <kwright(a)free-comp-shop.com> Programmer in Chief, Free Computer Shop <http://www.free-comp-shop.com> --- Food, Shelter, Source code. ---

April 2, 2001

Startup issues

by Michael Long

I have been playing with my network settings today and have made a change that has caused my system to be unable to read this file during boot up. Also any script that tries to read from it is unable to. Unfortunately I have no idea what I did to cause this. The following is the out put from 'ls -l' -rw-r--r-- 1 root root 235 Jan 30 19:59/ etc/rc.config.d/idedma.rc.config I am running SuSE 7.0. Thanks, mike

April 1, 2001

Richard Stallman will be speaking at Holy Cross

by Andy Stewart

Hi WLUG members, Richard Stallman will be speaking at Holy Cross soon. See the details below in an e-mail which I recently received. Later, Andy -- Andy Stewart, Founder -o) | Being stoned on marijuana isn't very Worcester Linux Users' Group /\ | different from being stoned on gin. -- Worcester, MA, USA _\_v | Ralph Nader http://www.wlug.org | -------- Original Message -------- Subject: GNU/Linux Event at Holy Cross Date: Thu, 22 Mar 2001 14:51:33 -0500 (EST) From: Andrew Hwang <ahwang(a)mathcs.holycross.edu> Reply-To: Andrew Hwang <ahwang(a)mathcs.holycross.edu> To: astewart(a)world.std.com As part of an ongoing series of talks on Computer Science and Ethics, Richard Stallman of the Free Software Foundation will be speaking on Wednesday, April 18, at the College of the Holy Cross. The title of his talk is "The Free Software movement, and the GNU/Linux operating system" The talk will start at 3:30 and will run for about 2 hours (including Q&A). The location is 112 O'Neill Hall. The event is open to the public, and GNU software will be for sale. If you have questions about this event, please send me email at the address below. Hope to see you there! Andrew D. Hwang ahwang(a)mathcs.holycross.edu Department of Math and CS http://mathcs.holycross.edu/~ahwang College of the Holy Cross (508) 793-2458 (Office: 331 Swords Hall) Worcester, MA, 01610 (508) 793-3530 (fax)

March 23, 2001