Re: setup firewall/router/proxy

From: Steve Bertrand (iaccounts_at_ibctech.ca)
Date: 09/01/04

  • Next message: Curtis Vaughan: "5.1, 5.2, or 5.3???"
    Date: Wed, 1 Sep 2004 13:57:18 -0400 (EDT)
    To: "Micheal Patterson" <micheal@tsgincorporated.com>
    
    

    > It's been a long time since I've played with Linux in general, last
    > one was
    > RH. If Mandrake has ipchains or ipfw, I'd say go with either and still
    > use
    > squid. It's popular, easy to configure, works well and has support. It
    > shouldn't need any routing daemon as long as none of the advanced
    > routing
    > protocols are needed.
    >

    I assumed by ``routing'', you meant Network Address Translation (NAT),
    which is called natd and is included as part of the base system.
    `routed', is a router _discovery_ protocol, and used if your router
    has multiple routes and the network is configured to share this
    information.

    If you simply want an internal network translated to a public IP, use
    natd+IPFW (my choice), and if you have more than the default route for
    the internal network, for simplicity sake you can manipulate your
    routing table and specify static routes using the route(8) command.

    ...and as I and others have said, squid is probably the best choice
    for proxy. Using IPFW with a squid proxy, you can even configure it
    for transparent mode, so you don't have to modify the browsers at all.

    There are a few docs out there for this...

    Steve

    > --
    >
    > Micheal Patterson
    > TSG Network Administration
    > 405-917-0600
    >
    > Confidentiality Notice: This e-mail message, including any
    > attachments,
    > is for the sole use of the intended recipient(s) and may contain
    > confidential and privileged information. Any unauthorized review, use,
    > disclosure or distribution is prohibited. If you are not the intended
    > recipient, please contact the sender by reply e-mail and destroy all
    > copies of the original message.
    >
    > _______________________________________________
    > freebsd-questions@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    > To unsubscribe, send any mail to
    > "freebsd-questions-unsubscribe@freebsd.org"
    >

    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"


  • Next message: Curtis Vaughan: "5.1, 5.2, or 5.3???"

    Relevant Pages

    • Re: Routing
      ... I have configured linux proxy server in kernel 2.4. ... I had 2 network cards..One is connected to lan other one is goes ... But I can t able to access the websites through squid. ... Evenafter rebbooting the routes are not appear in IP Routing ...
      (comp.os.linux.security)
    • Re: tranparent proxying, squid, nat, ipfw
      ... I have done a number of servers in this setup. ... the divert line as the first line in ipfw and the necessary NAT in rc.conf. ... > so far this was the simpliest squid configuration that i've seen... ...
      (freebsd-questions)
    • Re: problems with networking and route command
      ... Unfortunately natd does not work as yet. ... about advisability of referring to the Handbook IPFW page, ... It will also protect your IPv6 network, ... Still I have server connection to the internet on rl0 and server ...
      (freebsd-questions)
    • Re: (no subject)
      ... > I am using squid to access the the internet with other users on a small ... presumably they aren't running squid themselves, ... using Squid on the "server" as their web proxy. ... > notice an IP sddress on my network 192.168.1.244 which is strange. ...
      (Fedora)
    • Re: special squid config help... thanx!
      ... >The thing here is that i need squid to be configured in a way ... > network 10.106.6.0 can only access the squid proxy from 4am-12am only, ... but again I find the sqquid acl too ...
      (Security-Basics)