hello

First -heres the setting

I have 4 machines

3 machines run windows and only one machine run linux (Redhat 9.0).The linux machine runs samba,ftp and ssh.(I also use it as a desktop machine).All of these machines are on DSL connection with Dynamic IP address.

I find it very scary to run my ftp because it was intended for the certain subnets.

How can I use my servers in a more secure way even though I don,t have static IP?And with samba How do I make it possible for people in my house to browse my shares on linux?

Thnx in Advance

Hi,

You didn't really say what your network topology is, but I'm assuming that you have a DSL modem, and 4 computers all plugged into a hub or switch, and there's no router.

I posted in Linux Software (I think, or newbie) about how to set up your smb.conf file, there's an example one there that should not need much tweeking for your setup. If you want to secure your network using the hardware you have, you should buy a second NIC for the Linux box, and configure iptables and IP masquerading on it... there are a bunch of example scripts floating around this forum. Anyway basically once you have the second NIC installed, set up the connection like this:


__________
| DSL Modem |
----------------
____|_____
| Redhat 9 |
----------------
____|______
| Hub/Switch |
------------------

then the rest of the puters off the hub. Configure iptables to only allow ftp, ssh and whatever from your internal LAN IP range. DHCP and PPPoE should not be a problem, but I've only set up DSL on OpenBSD. Also you could run dhcpd on the internal interface of the Linux box so that you can essentially plug any computer into the network and have internet access for it.

HTH, if you're more specific with your problems it's easier to give you specific advice.

Ben.

DHCP with linux and file sharing for linux server and windows client

I forgot to mention I use a DSL router not Modem.

And again is it possible to secure it(my servers) without any masquarading?

Not without securing each individual box. And with 3 winxp boxen you are not going to have an easy, or satisfying, ride. I would highly recommend real electrical separation from the internet, with a non-M$ OS for firewalling (http://www.openbsd.org).

B.