Network Router

davidolaj · 11-29-2006, 04:14 PM

Hi,

Please I want to use Fedora Core build a secure router on my network to distribute internet access to other people via my office internet.

Someone should please tell me how to build the router with the Fedora Core!

David.

jantman · 11-29-2006, 05:16 PM

Quote:

Originally Posted by davidolaj

Please I want to use Fedora Core build a secure router on my network to distribute internet access to other people via my office internet.

David,

Could you be a little more descriptive and clear? I'm getting a bit lost. What is the difference between "your network" and the "officer internet"? Do you mean that you just want to build a router for your office? Or is there something I'm missing?

-Jason

Brian1 · 11-29-2006, 05:23 PM

Check out this site to build a firewall router. Just answer the questions it ask.

Then once the script is built and saved to /etc as ' firewall.sh '.
Also it must have the executae permission set as well. ' chmod +x /etc/firewall.sh '
Now do the following.
Disable the default Fedora firewall script. ' chkconfig --level 345 iptables off '
Stop the iptables. ' service iptables stop '
Then goto /etc and type. ' ./firewall.sh ' Will need to be run as root.

To make it startup on bootup add the line ' /etc/firewall.sh ' to the bottom of /etc/rc.local file.

Brian

davidolaj · 11-29-2006, 05:41 PM

Quote:

Originally Posted by jantman

David,

Could you be a little more descriptive and clear? I'm getting a bit lost. What is the difference between "your network" and the "officer internet"? Do you mean that you just want to build a router for your office? Or is there something I'm missing?

-Jason

Thank you Jason...

I mean the same network.

Let me explain more...

I have broadband internet in my office assigned with public ip address as xx.xx.xx.11/29

Now I have Fedora Core box with 2 NIC and I assigned xx.xx.xx.13/29 to eth0, I also assigned 192.168.2.1/29 to eth2. I used cross cable to connect my laptop direct to the Fedora Core box eth1 and assigned 192.168.2.2/29 on the laptop but I can not access internet from the laptop. When I ping 192.168.2.1 from my laptop, it reply fine but pinging xx.xx.xx.11 time out.

Please what should enable on the Fedora Core box to work as router/server on the network?

Note: I'm just new to linux configuration!

David.

davidolaj · 11-29-2006, 05:50 PM

Quote:

Originally Posted by Brian1

Check out this site to build a firewall router. Just answer the questions it ask.

Then once the script is built and saved to /etc as ' firewall.sh '.
Also it must have the executae permission set as well. ' chmod +x /etc/firewall.sh '
Now do the following.
Disable the default Fedora firewall script. ' chkconfig --level 345 iptables off '
Stop the iptables. ' service iptables stop '
Then goto /etc and type. ' ./firewall.sh ' Will need to be run as root.

To make it startup on bootup add the line ' /etc/firewall.sh ' to the bottom of /etc/rc.local file.

Brian

Hi Brian,

Please explain in simple way! I mean the way I can easily catch up with the scripts/configuration...

David.

fordeck · 11-29-2006, 05:54 PM

Edit...: What OS are you running on your laptop?

If it is running Linux can you post the results of:

Code:

route -n

If it is running Windows can you post the results of:

Code:

route print

Brian1 · 11-29-2006, 06:20 PM

A bit confused on your public IP. xxx.xxx.xxx.11/29 Is the following correct?
I will use a random IP address 12.33.44.11/29

Code:

Address:   12.33.44.11          00001100.00100001.00101100.00001 011
Netmask:   255.255.255.248 = 29 11111111.11111111.11111111.11111 000
Wildcard:  0.0.0.7              00000000.00000000.00000000.00000 111
=>
Network:   12.33.44.8/29        00001100.00100001.00101100.00001 000
HostMin:   12.33.44.9           00001100.00100001.00101100.00001 001
HostMax:   12.33.44.14          00001100.00100001.00101100.00001 110
Broadcast: 12.33.44.15          00001100.00100001.00101100.00001 111
Hosts/Net: 6                     Class A

So you available IPs from 9 to 14 correct?

So you set the eth0 IP to xxx.xxx.xxx.13?
What is xxx.xxx.xxx.11? Another machine?

So you should be able to ping xxx.xxx.xxx.13 but not sure of xxx.xxx.xxx.11.
Can you ping xxx.xxx.xxx.13 from the laptop connected to eth1?

One thing I would do is set the 192.168.2.0 Class C to a full class C to make use of 254 IPs. 192.168.2.0/24 to have 192.168.2.1 through 192.168.1.254.

Maybe this is what you are needing.
Now have you enabled IP masquerading to allow network data from eth1 to pass on to eth0?

Lets stop there for now. This thread can go so many ways without specifically what you want. Lets take it one step at a time.

Brian

davidolaj · 11-29-2006, 06:37 PM

Brian..

I only use the ip addresses as samples they're not correct ip addresses.

I think what I need is how to enable fedora core IP masquerading to allow network data from eth1 to pass on to eth0!

Please tell me how to enable the fedora core IP masquerading..

David.

Brian1 · 11-29-2006, 06:50 PM

Ok simply run this command first.
echo "1" > /proc/sys/net/ipv4/ip_forward

Then run this command.
/sbin/iptables -A FORWARD -i eth1 -j ACCEPT

Found this from here. http://www.redhat.com/docs/manuals/l...ide/ch-fw.html

If going by the first post and entering the info to build a gateway will do the same.

Brian

jantman · 11-29-2006, 08:31 PM

Brian,

Your advice is indeed correct, but a bit simplistic for my taste.

David,

There are a lot of security issues with connecting a system to a broadband connection. You really should have a decent firewall. While this is possible with Fedora, the easiest solution is to download a distribution like IPCop. The installation is very easy, and it will handle all of the routing and firewall functions with easy setup.

Personally, I've done multiple experiments with routers, and always found a pre-made distribution easiest.

On the other hand, I'm sure there's a reason why you chose Fedora. I have EVERY linux box on my network running SuSE, and it's much easier to have a heterogeneous Linux setup, where administration, logging, monitoring, and updates are the same. In this case, I would highly recommend that you do a search online for a router/firewall HOWTO for FC, as these delve into the details of configuration and installation.

-Jason

amitsharma_26 · 11-30-2006, 08:33 AM

Quote:

Originally Posted by davidolaj

Please I want to use Fedora Core build a secure router on my network to distribute internet access to other people via my office internet.

Someone should please tell me how to build the router with the Fedora Core!

Use SQUID (for web cache proxy or transparent web cache proxy) for internet access & use IPTABLES for security.

Squid how to for transparent proxy

& iptables tutorial

Brian1 · 11-30-2006, 05:40 PM

I agree there jantman on the security issues. From the users request, the user just wanted to have eth1 to connect to the internet through eth0 at this time from what I interrupt.

Brian