LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 05-22-2009, 04:11 PM   #1
Oxagast
Member
 
Registered: Aug 2003
Location: Mocksville, NC, USA
Distribution: Gentoo, Slackware.
Posts: 410

Rep: Reputation: 30
Router/Firewall/IPS system


Hi, I'm looking to build a router/firewall/ips system. I have a DSL modem, then I can use a crossover to get to the box, and then I want to connect the box to a switch to the rest of the network. I'd like to do some things to it though, like have advanced firewall capabilities, good security, and I was thinking of using snort to filter packets, dropping things that look like exploits, drop advertisements, look for brute forcing on FTP and SSH, ping bombs, and such. I'd also like to do some traffic shaping, like under full load on the DSL line I'd like to be able to specify which computers get more bandwidth, etc. I'll be using a Pentium MMX machine with a 5 gig hard drive, cdrom, and 2 nics. Anybody know how hard this would be and have any suggestions?

Thanks in advance
 
Old 05-22-2009, 09:07 PM   #2
{BBI}Nexus{BBI}
Senior Member
 
Registered: Jan 2005
Location: Nottingham, UK
Distribution: Mageia 4
Posts: 4,296

Rep: Reputation: 205Reputation: 205Reputation: 205
The one I use is Smoothwall. There's also IPCop.
 
Old 05-23-2009, 08:43 PM   #3
fuubar2003
Member
 
Registered: May 2004
Location: Orlando, Florida
Distribution: SLES10/11, RH4/5 svrs, Fedora, Debian/Ubuntu/Mint; FreeBSD/OpenBSD
Posts: 63

Rep: Reputation: 26
You also might consider going hardcore by reconfiguring the cat5 cable connecting your DSL modem to your IPS box by removing the transmit pairs, so your IPS box in the middle cannot transmit. One of my friends did this but instead of using a switch, he simply :
1. DSL modem here
2. Hub here ------> cat5 to firewall/switch----lan
3. cat5 with transmit pairs removed from hub connected to IPS/snort

This way the snort box is completely apart from your lan.

Last edited by fuubar2003; 05-23-2009 at 08:47 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
IPS vs Firewall priyadarshan Linux - Security 10 03-20-2009 02:14 AM
router/firewall for static ips and mult machines racerx7 Linux - Networking 3 07-08-2006 01:38 AM
firewall with private ips samg Linux - Security 7 06-02-2006 06:41 PM
Firewall lets ips which are not in the firewall ... why ? sys7em Linux - Networking 2 06-30-2005 12:50 PM
Using Linux as Router for 2 IPs gofauna Linux - Networking 5 07-18-2002 01:33 AM


All times are GMT -5. The time now is 07:41 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration