LinuxQuestions.org - I need to setup a Linux router for my 2 public subnets

- Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)

- - I need to setup a Linux router for my 2 public subnets (https://www.linuxquestions.org/questions/linux-networking-3/i-need-to-setup-a-linux-router-for-my-2-public-subnets-444530/)

I need to setup a Linux router for my 2 public subnets

Hi guys,

I'm getting rid of my Internet Security Advisor, and he is in charge of the router system. I know he is going to take the router software with him, for he compiled it. Now, I've been reading on how to setup a router to give access to the servers in my network to the outside world.

I already have a Firebox ready to go in place, but before I can bring it live, I need my Internet connection to be up and running.

My setup goes like this:

Nic1: IP: 196.40.69.190
Gateway: 196.40.69.189

Nic2: IP1: 200.122.137.241
Mask: 255.255.255.248
Gateway: 196.40.69.190 (Ip on Nic 1)

IP2: 200.122.137.129
Mask: 255.255.255.240
Gateway: 196.40.69.190 (Ip on Nic 1)

Again, both nets on Nic2 have to be able to hit the internet and people from the Internet need to be able to access my network back.

I don't know if any of you could give me some tips or hints in order to be able to achieve this project.

I have both Fedora or Red Hat 8.0 ready to be loaded on a machine. But, if any of you think I could use a different OS, any suggestion will be highly appreciated.

Thanks again for all the help.

There are 2 great distros that i have used that will do what you want. IPCOP and Smoothwall, my personal preference is IPCOP. a small dedicated firewall distro that install from a disc, very easy to follow the installation instructions you will have it up and running in under an hour.

It is a round 40 MB's or so iso image to download and has a web-based interface for easy administration. You can then forward traffic from the outside world to your servers, just check out the website for more info.

www.ipcop.org

Good post, lots of detail. But what is your goal, & what is your actual problem?

Is your network up? If those are your real IP's, probably not:

196.40.69.190
200.122.137.241
200.122.137.129

all return

Code:

The following error was encountered: 



Connection Failed 



The system returned: 



    (110) Connection timed out



 The remote host or network may be down. Please try the request again.

from squid/2.5.STABLE12 -- I'm running SmoothWall 2.0 & considering moving to IPCop.

You also need to look at:

and fix you lack of reverse IP listings. Again, I am assuming those are your real IP's.

Some Guesses
196.40.69.188/30 is your connection to your ISP
200.122.137.240/28 & 200.122.137.128/28 are the "2 public subnets" referred to in your title.

More Details
What is a "Firebox"? Is it one of these: http://www.google.com/linux?q=Firebox+router?
If so, are you stuck with / committed to it? -- I.E., is there any point in pointing you to IPCop?

thanks for the update

Hi guys,

My goal and actual problem are quite simple. I need to remove my actual router, for the guy that is giving it maintenance and support is leaving, and of course, taking his linux compilation with him. My goal is to be able to setup a simple linux machine to perform the routing from the Internet to the public subnets I have.

I think you should be able to connect to IP 196.40.69.190 for I just tried from an external server.

The reverse dns problem is being fixed as we speak. I sent the request to my ips and he's taking care of it.

My subnets are correctly as you described.

A Firebox is a stand alone firewall solution. You can search for it as Watchguard Firebox and check the specs on it. It's only a firewall solution. No router or anything similar loaded on that machine. I've been doing some serious research and the firewall won't handle router functions. That's the reason why I need a simple routing solution to put in front of the firewall.

Let me know what you guys think. Like I said, the only thing I need is a firewall. Nothing else.

Thanks for your help,

Francisco

Quote:

Originally Posted by drcoco

Well my suggestion is both a firewall and a router so it should be close to suit your needs, you can remove your other firewall and just use the IPCOP box instead, an all in one package. I ran ipcop for a number of years and ran a web and mail server on my network and it ran flawlessly.