hello there i have some very primitive questions
Hi there whats the best way to protect an whole net with 10 IP-Adresses, without privace them all?? Especially i want to protect some Webservers, I dont know how to make the routing and firewalling the net with ipchains Is the only way with advanced routig, or is there another way thx DJMAD ---------------------------------------------------------------------------- *hehe* [1]+ Done ls $LS_OPTIONS >/dev/sda [2]+ Done ls $LS_OPTIONS >/dev/sdb [3]+ Done ls $LS_OPTIONS >/dev/hda [4]+ Done ls $LS_OPTIONS >/dev/hdb *all done ready to reboot :-)* ----------------------------------------------------------------------------
get a pentium machine, put two nic's on it, stick linux and learn ipchains. makes a great firewall. wat do you mean by protect anyway? i have 4 webservers behind a linux-based firewall, and i simply allow connection only to port 80 and filter other traffic (except ssh). ipchains really isnt that hard, and there is an ipchains howto on www.linuxdoc.org On Fri, 02 Feb 2001, rene marhold wrote:
Hi there
whats the best way to protect an whole net with 10 IP-Adresses, without privace them all??
Especially i want to protect some Webservers, I dont know how to make the routing and firewalling the net with ipchains Is the only way with advanced routig, or is there another way
thx DJMAD
---------------------------------------------------------------------------- *hehe* [1]+ Done ls $LS_OPTIONS >/dev/sda [2]+ Done ls $LS_OPTIONS >/dev/sdb [3]+ Done ls $LS_OPTIONS >/dev/hda [4]+ Done ls $LS_OPTIONS >/dev/hdb *all done ready to reboot :-)* ----------------------------------------------------------------------------
---------------------------------------- Content-Type: text/html; name="unnamed" Content-Transfer-Encoding: quoted-printable Content-Description: ----------------------------------------
Hi René, On Fri, 2 Feb 2001, rene marhold wrote:
Hi there
whats the best way to protect an whole net with 10 IP-Adresses, without privace them all??
Especially i want to protect some Webservers, I dont know how to make the routing and firewalling the net with ipchains Is the only way with advanced routig, or is there another way
thx DJMAD
take a look at the SuSE firewall-package. It's easy to configure and gives you good protection. Deny everything you don't need, disable all services you don't need and put the webservers into the DMZ. This should work for now, for more protection read the firewall-howto or the introduction to firewalls at www.little-idiot.de (in german). Greetings, Ralf
---------------------------------------------------------------------------- *hehe* [1]+ Done ls $LS_OPTIONS >/dev/sda [2]+ Done ls $LS_OPTIONS >/dev/sdb [3]+ Done ls $LS_OPTIONS >/dev/hda [4]+ Done ls $LS_OPTIONS >/dev/hdb *all done ready to reboot :-)* ----------------------------------------------------------------------------
participants (3)
-
max -
Ralf Ronneburger -
rene marhold