LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (http://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Linux router suggestions (http://www.linuxquestions.org/questions/linux-networking-3/linux-router-suggestions-777180/)

EvilLinux 12-21-2009 04:14 AM

Linux router suggestions
 
Thanks in advance for reading and hopefully helping with issue\suggestions.

I've been messing around with pfsense, ebox, etc, etc software and none of it really is working to the need of me. I order a block of 32 ips (29 usable atm), I still haven't gotten access to them (hopefully in next day or two), but I run a server farm and really do not want to upgrade my Cisco 3600 router to a 10\100 mod for the internet and lan, its sitting with 10mb mods atm and its slower than dial-up on my network.

So here is my issue I'm running into\what I need:
I need to be able to route 28 IPS to different servers.
I will be needing to run firewall software.

I've been messing around with IPTables, and figured that or shorewall would be best my choice in dealing with a huge block of IPs and keeping my server secure. Can someone give me a quick start up script or suggestion\tutorial to a good iptable setup with a block of IPs, I spend 3 hours searching the webs and couldn't find anything that really applied to what I need.

Because the network will look like this:
(Cable Modem [the IPs]) -> Router\Firewall[Public IP assigned to internal NATs] -> Servers with internal IPs.

I know networking very well and iptables pretty well, I just have not dealt with IPtables in about a 2 years+ in this type of setup and I can not find my original setup configs anymore.

Any help is great, thanks in advance,

EvilLinux

kbp 12-21-2009 09:21 PM

Just go with some static nat's, see the copy/paste examples at the bottom of this link

cheers

EvilLinux 12-21-2009 11:23 PM

Alright I'll mess around with this, my cisco 3600 works well, simple enough only issue with it is that blocks like my master servers for Counter-Strike: Source, and other games and that is the part that drives me up the wall, which again is the main reason would like to get away with it, but doesn't look like I'm going to be able to with the way my ISP is bring my block of 32 ips, sigh...

You have any tricks to get a cisco 3600 router, or cisco router in general allowing traffic to random master servers for couter-strike and stuff like that, I'm mess around with it and see if I can't come up with something, thanks for the help.

kbp 12-22-2009 01:24 AM

You should be able to do firewall/nat functions with your 3600...

EvilLinux 12-22-2009 01:30 AM

Yes, I can do nat, firewall all the fun jazz and make me happy inside that I'm protected from the world of spam and rotten bullcrap the internet has produced over the years, but what drives me nuts is I can't can't connect to half my games :).

I think I'll just suffer for the next 2 weeks till my ISP wants to pull its head out of its butt and get its date and times correct so I can get my CIDR 32 block installed, most likely causing the issue because my local nat is overloaded with only access to 2 public IPs lol. I guess better to be secure than unsecure ;).

Any who, Happy Holidays all.


All times are GMT -5. The time now is 11:00 AM.