I am interested in building a linux based firewall (preferably a stripped down version of redhat with IPtables and some other software such as snort ...), but I want to run it from CD. The machine would have quality 3com network cards, having it boot from CD would make it more secure since all I would have to do is a reboot in order to restore the firewall to its original state.

I guess I am looking for something like the Linux Router Project, but using a CD instead of floppy (I used to run LRP, so I know this is what I want to do).

Are there any docs/howtos/faqs on how to build your own linux distro, but using a CD? I could use a small hd for swapping needs, logging would be sent to a remote log server.

Thanks!

There are plenty of Linux Distros that run from CD. But, you are wanting to configure it for your needs.

The one that comes to my mind is Knoppix. You can install Knoppix to your harddrive and then customize it how you want and then "REMASTER" (as they all it) the cd. Here is the link.

http://www.knopper.net/knoppix/index-en.html

They have a link to there forum somehwere on there. I have read through their forum and seen steps on remastering knoppix.

I'm sure there are other Distros or other ways to do what you want, but this is the only way that I know of.

Dave

this is pretty much what I want to do, install it, configure it, then remaster it so it can be run from CD. I am kinda familiar with knoppix, but I was under the impression it was made to demo linux and recover systems. I will check the remastering procedure tho, it should be similar for other systems I hope. Thanks!

Googled and found this forum with a guy telling how he remasters. I have seen others with more detail though. But this will give you an idea.

http://dsl.upc.es/GNUFiber/knoppix_iso/remastering.html

Also, if you don't know, to install Knoppix to the harddrive the install script is located in:

/usr/local/bin/knx-hdinstall

be sure when you run it that you use the sudo command in front:

sudo knx-hdinstall

I've used it before and works great. I haven't gotten into remastering the CD yet though. So I can't be any help there. Sorry.

Dave

thanks, this should help me out a lot.