Firewall

[habadaba]

Is it better to have a firewall (linux? mandrake or mandrakes multi network firewall)just after the adsl router and then the internal network, or to have a personal firewall on each pc?

[][]

 

[loosecannon]

hey you can always use my linux distro has dam usefull firewall/ID ... but the ADSL router is adequate but limited ... can have problems with banks and some sites ...

 

[habadaba]

and how can i get a copy of your distribution?

 

[loosecannon]

drop me a mail and we can talk click on my user name to the left

 

[mbs]

Heehee - 'Cannonball' Linux Rulez! []

 

[habadaba]

have to admit that as usual LINUX rulez, cant wait for loosecannon to email me back!

 

[loosecannon]

ill be sending you data shortly i have just been working on the connection management so that if the default link (diginet/adsl/mywi) goes down it will reconfigure the firewall to use any additional adsl link it has until the gateway can be setup and likewise it checks to see if the primary link is up again and reroutes data down the main link ...

have a few pending issues ... one been the ability to have multiple PPPoE providers on the same link and use the service name when starting pppd ...

and one other irritation is the incorect properties of a users cgi-bin directory in public_html ...

 

[wab512]

I'm using Mandrake's MNF, and I must tell you it is great. I wanted to evaluate it and build something similar but in the end that I decided it caters for all my needs and building something similar would be a waste of time (although it is a good learning exercise). The only downside is if you have multiple accounts, but I only have one so it is not a problem (I am sure you can mod this).
Other than that, DynDNS, WebProxy, Content Filters, DHCP server, stats on CPU and Link usage, etc, etc... all built in.

 

[loosecannon]

the system i built does all the basics and has built in support for multi accounts ...

also includes AV/SpamAssasin samba set up as a PDC for use with M$ ideal for the small bussiness and as it has easy to use BW management ideal for south africa ...

it has rodents driver for my wireless built into the kernel and the config is automagic for mywireless [only needs UN/PW]

 

[habadaba]

sound brilliant loosecannon on what flavour of linux is it based?

 

[loosecannon]

it is a system i built up from source code and is based round linux 2.6(.8.1) all admin is done via a web interface core settings are managed in a java applet ...

it will work with Dial On Demand/ADSL/IPW/Analogue Leased Line/Diginet as it is compact it is happy to run on a old PII the more users the more ram 512Mb is a good start ...

hyla fax and exchange for linux are integrated so it can replace M$ ...

all users are stored in LDAP [not /etc/passwd] so you can cascade servers one customer has 3 servers running one as Firewall and mail one as fileserver and one as a rsync backup server ...
all users are stored on the firewall but show up on all servers ...

it allows load balancing and backup of diginet with ADSL ... i have a customer who got conned as we all did by sentech and has installed a ADSL line to have best of both ...

also has freeswan built in for secure access ... with its own CA smtp/pop3/http use 128bit encryption ...

basicaly it is a linux server for windows users ...

 

[andres101]

loosecannon, this sounds like quite a nice distro... don't you want to open a project on sourceforge.net for it (cannonball linux)? maybe we can get it hosted on local mirrors (ftp.is.co.za/ftp.saix.net/ftp.up.ac.za).

 

[loosecannon]

hey it is not bad it is the way i make a living at the moment and would like a commertial/non comertial version [via serial number atm] similar to red hat ...if you want i can couirier a ISO to any one intrested [limitations are that internal can be no more than /29 5pc's] the distro can be recreated quite easily from a 100Mb tar ball and further 50Mb applications so allthough the ISO is 693Mb it is no more than 150-200Mb DL ...