Re: [SuSE Linux] Linux as Internet gateway
-----Original Message----- From: Lenz Grimmer <grimmer@suse.de> To: suse-linux-e@suse.com <suse-linux-e@suse.com> Date: 09 December 1998 12:04 Subject: Re: [SuSE Linux] Linux as Internet gateway
Hi,
On Tue, 8 Dec 1998, Richard King wrote:
Would there be any complications if, say, I am on a company LAN, and wish to enable certain PC's to access the Internet via my Gateway - ( and others not) - BUT at the same time allow them to retain access to the company LAN and its nameserver via TCP/IP and via another default gateway???
Is this possible? How might it be done?? (This is something I really need to do....)
Yes, it is possible. But it's not a trivial task... The routing tables are the critical point here. If you only want to allow http and ftp, you could set up squid as a proxy server on your linux box.
Bye, LenZ
Thanks Lenz - May I imply from the above, that if I use Squid, the problem then becomes simpler? Or will the routing tables still be remain a critical point? I do indeed only want to allow HTTP and FTP - (maybe not even FTP). I have installed Squid, but can't seem to find any man pages or other information on its configuration and use. Can anyone point me in the right direction please? If I ran a nameserver on the gateway Linux box - rather than use the one on the coprorate LAN - would that also simplify matters? As far as the corporate LAN is concerned, apart from the Internet connection, most of our PC's only use the network for printing to network printers. We're already thinking of ditching the coporate LAN and having our own small network - for reasons of cost and reliability - so perhaps that might make things easier? tia Richard King Johannesburg
- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
Hi, On Wed, 9 Dec 1998, Richard King wrote:
May I imply from the above, that if I use Squid, the problem then becomes simpler? Or will the routing tables still be remain a critical point?
You still have to make sure, that your routing is set up correctly. Squid is only used for proxying http and ftp-traffic over the Linux box.
I do indeed only want to allow HTTP and FTP - (maybe not even FTP). I have installed Squid, but can't seem to find any man pages or other information on its configuration and use. Can anyone point me in the right direction please?
Have a look at /usr/doc/packages/squid for further info.
If I ran a nameserver on the gateway Linux box - rather than use the one on the coprorate LAN - would that also simplify matters?
This depends on the capabilites of the LAN's DNS. If it only resolves your internal hostnames, you still need to be able to resolve external hostnames. Usually you will use your provider's Nameserver for this task. In addition to that, you can install a local DNS on the Linux box, which acts as a "caching nameserver", which caches DNS request from your ISP.
As far as the corporate LAN is concerned, apart from the Internet connection, most of our PC's only use the network for printing to network printers. We're already thinking of ditching the coporate LAN and having our own small network - for reasons of cost and reliability - so perhaps that might make things easier?
Well, Linux could certainly fit in there... :-) Bye, LenZ ------------------------------------------------------------------ Lenz Grimmer SuSE GmbH <A HREF="mailto:grimmer@suse.de">mailto:grimmer@suse.de</A> Schanzaeckerstr. 10 <A HREF="http://www.suse.de/~grimmer"><A HREF="http://www.suse.de/~grimmer</A">http://www.suse.de/~grimmer</A</A>> 90443 Nuernberg, Germany - To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
participants (2)
-
grimmer@suse.de
-
kingr@icon.co.za