LinuxAnswers - the LQ Linux tutorial section.
Go Back > Forums > Linux Forums > Linux - Networking
User Name
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.


  Search this Thread
Old 05-22-2009, 04:11 PM   #1
Registered: Aug 2003
Location: Mocksville, NC, USA
Distribution: Gentoo, Slackware.
Posts: 410

Rep: Reputation: 30
Router/Firewall/IPS system

Hi, I'm looking to build a router/firewall/ips system. I have a DSL modem, then I can use a crossover to get to the box, and then I want to connect the box to a switch to the rest of the network. I'd like to do some things to it though, like have advanced firewall capabilities, good security, and I was thinking of using snort to filter packets, dropping things that look like exploits, drop advertisements, look for brute forcing on FTP and SSH, ping bombs, and such. I'd also like to do some traffic shaping, like under full load on the DSL line I'd like to be able to specify which computers get more bandwidth, etc. I'll be using a Pentium MMX machine with a 5 gig hard drive, cdrom, and 2 nics. Anybody know how hard this would be and have any suggestions?

Thanks in advance
Old 05-22-2009, 09:07 PM   #2
Senior Member
Registered: Jan 2005
Location: Nottingham, UK
Distribution: Mageia 5, Linux Lite
Posts: 4,312

Rep: Reputation: 208Reputation: 208Reputation: 208
The one I use is Smoothwall. There's also IPCop.
Old 05-23-2009, 08:43 PM   #3
Registered: May 2004
Location: Orlando, Florida
Distribution: SLES10/11, RH4/5 svrs, Fedora, Debian/Ubuntu/Mint; FreeBSD/OpenBSD
Posts: 63

Rep: Reputation: 26
You also might consider going hardcore by reconfiguring the cat5 cable connecting your DSL modem to your IPS box by removing the transmit pairs, so your IPS box in the middle cannot transmit. One of my friends did this but instead of using a switch, he simply :
1. DSL modem here
2. Hub here ------> cat5 to firewall/switch----lan
3. cat5 with transmit pairs removed from hub connected to IPS/snort

This way the snort box is completely apart from your lan.

Last edited by fuubar2003; 05-23-2009 at 08:47 PM.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
IPS vs Firewall priyadarshan Linux - Security 10 03-20-2009 02:14 AM
router/firewall for static ips and mult machines racerx7 Linux - Networking 3 07-08-2006 01:38 AM
firewall with private ips samg Linux - Security 7 06-02-2006 06:41 PM
Firewall lets ips which are not in the firewall ... why ? sys7em Linux - Networking 2 06-30-2005 12:50 PM
Using Linux as Router for 2 IPs gofauna Linux - Networking 5 07-18-2002 01:33 AM

All times are GMT -5. The time now is 04:46 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration