Setting up Monowall firewall

[crimesacom]

Hi guys, been at this for three days now, on and off. I have a network with a kawuleza connect internet connection. IP as supplied by Kawuleza. Straight connection to my router, an old Telkom brute which puts out 10.0.0.2. I have some old parts which have been put together with a full motherboard and a PCI extra NIC. I configured WAN to use DHCP and set default gateway as 10.0.0.2. On the LAN side, I set IP as 10.0.0.8 to keep it simple but am getting no internet when I change my client IP to 10.0.0.8 as default gateway, and DNS as same. I have a server setup running a domain but have bypassed that DNS setup to avoid confusion but am still not getting internet through the firewall. Are there any glaringly obvious mistakes I have made here? Our internet is getting raped on a daily basis by our staff and short of issuing warnings, I have no way of stopping them short of torrenting etc. Any help greatly appreciated.

 

[web_dude]

My suggestion:

- Plug your kawuleza connection directly to the WAN card on the firewall with the settings that they give you.
- Cancel any DHCP on the firewall.
- On your server, keep running your domain and DHCP
- On your server, Set static LAN IP for the firewall
- on your server, under DHCP set Gateway with the firewall IP
- you may require the primary DNS to be the one from your server (to keep network discovery)
- you can set the forwarders on the DHCP to the Kawuleza DNS and Google DNS if you like to use them (8.8.8.8)


- Now your old telkom router can be used as a wireless Access point if you want. Just cancel the DHCP on it, create a wireless and plug a ethernet cable from your network into one of the ports.

 

[crimesacom]

Thanks for your reply WT, Done all the above but the issue seems to be on the machine itself. I am going to try 2 external NIC's, it seems the one on the motherboard is not letting anything through it. If I alternate LAN and WAN on the NICs, I can ping to the one NIC but not to the other on exactly the same setting for each. Will post here when I have a new NIC to play with. Thanks for your reply though.