I am working with Cyberoam firewall UTM hardware based( Uni Thread Management box included) The cyberoam managing the following services , Is it possible to make these service in linux. Because, we are paying annual renewal for these huge amount.

Right balance of security, connectivity and productivity through their firewall, VPN, Gateway Antivirus and Anti-Spyware, Gateway Anti-spam, Intrusion Prevention System (IPS), content filtering, bandwidth management, multiple link management and comprehensive reporting features.* High network uptime and uninterrupted access are guaranteed by Cyberoam's high availability and hardware bypass features.

.

Also we have the leased line for internet with WAN IP(public ip), the cyberoam have four Ethernet port, the first port. used to WAN cable , the second port using cross cable to switch. From switch user can access Internet and managing user by cyberoam.

Now I install one machine for Squid proxy for internet sharing for users in the same machine I have to write NAT for 6 public ip .


I ask you, we wrote some NAT rule for 6 public ip map to local ip in cyberoam. this would be possible to write linux server.


Please suggest me.

You certainly can NAT under linux, very simple. This is nothing at all to do with squid, just iptables, so check out the iptables guides and howto's. http://www.howtoforge.com/nat_iptables


If you're looking to replace a hardware firewall (of sorts) with a self built Linux appliance directly facing the internet, that's a REALLY bad idea. Especially if you're not fully comfortable with things like iptables, and given you're asking about natting I'd possibly think that this is the case. Some things are worth paying for, or at least implementing more standard prebuilt solutions, e.g. ipcop / pfsense.

Thank u for valueable reply.

We really thank u for this documents and we try to install this one if any issues we need u r support at all. and we need more details and support like this regarding this issue.

and one more thing

what is pfsense tel me some details about that

Once again Thank u

Plenty of info on pfSense: http://tinyurl.com/dbnkhp