Hi I am fairly new to linux and am trying to set up a linux pc as a firewall box for a Windows XP PC. I have a Linux PC with Fedora Core 3 installed and two eithernet cards installed in it. Going in to one card is my internet connection from my router. My other card is connected to a hub which then connects to my Windows XP computer I am trying to set up the firewall for. My fedora box can get on the internet just fine as can my windows xp machine when its connected directly to the internet. However when I try to connect my XP PC to my Fedora PC it cannot connect saying "You Might not be able to access the internet or some network resources. This problem occured because the network did not assign a network address to the computer". I tested my connections by first installing Windows XP on the PC fedora now exists and it set itself up as my internet gateway almost flawlessly. Fedora is being a little more stubborn. I have gone to my firewall settings in fedora and set both my etho0 and etho1 as trusted devices. When I try to enable the cards in my network settings, my card which my internet is coming in can be activated just fine. However the one that I'm trying to use to share the internet connection with my windows xp pc cannot be activated. Should I use the setting "Automatically obtain IP Address Settings" or "statically set IP Addresses" since this card is not really used to connect to the internet? If statically, what do I put as the Address, Subnet mask, and Default Gateway Address? Any ideas that might help me with this problem would be greatly appreciated.

Thanks

Unless you have a dhcp server, you'll have to manually set the IP/sub_mask of the WinXP box.

The IP/subnet mask need to be on the same subnet as the Linux ETH1 card assuming ETH0 was connected to the internet. The Default gateway of the WinXP box should be ETH1's IP address.

You'll need to enable packet forwarding for the linux box. I'm not sure how fedora handles this, but http://www.e-infomax.com/ipmasq/howt...-examples.html link has a pre-designed firewall that should get you up and running.

Squid could be used as one of the solution for your scenario.

However i've already created & posted a squid.conf on LQ.

Go through this thread..
http://www.linuxquestions.org/questi...d.php?t=388261

& second last post is the one in which i have posted a complete squid.conf.

Go thru it & you need to modify the ip series mentioned in red with your local lan series.
acl mylan src 192.168.10.0/255.255.255.0

Thats it. You are done.

Copy & paste all this conf over to new file, name it as squid.conf & replace it with existing /etc/squid.conf. Go to your XP box, set your local lan eth ip as proxy server ip & port as 8080.

Surf the net.

In case you still need some help, come back to LQ n reply to this thread with your queries. Someone sure gonna help you.

..amit..