Hi,

I want to set up a Linux Firewall&NAT for my home LAN.

This I imagine is a nice way to try to Learn some Linux

I have an old PC with 2 network adapters, that should be able to do the job.

What would be a good way to do this?

In the future I would like to use the same PC also for other things, that could be usefull to run on a PC that is allways on

So the firewall should not limit the PC from being later used also as:
VPN gateway, WEB server, MySQL, File&Print.

It would be great if I also could turn that PC into a "DigiBox" TV receiver, with some added hardware. VDR / DVB Linux TV.

Thank you for any suggestion or reply

iptables is the default firewall with linux
to make that easy
try shorewall(shorewall.net)

and u can enable all that servers(VPN gateway, WEB server, MySQL, File&Print.) with shorewall
as far as DIGIbox is concerned i haven't used that so i cannot comment on that

iptables might be a good way to following. but there be some difficult for configuration. you could refer to man guide.

If you are going to connect to the Internet it is better to use a firewall that does the job for you (like firestarter) and then study the tables produced by it. In other words, you do not want to experiment with IP tables on your network and get it wrong ... because you are going to get cracked and that is not worth the troubles.
MHO.
Hope it helps.

Rick

Thank you for your replys

I think I go and read about iptables / shorewall.

Hope I dont get cracked

iptables and shorewall r not 2 diff. firewalls
but iptables is firewall and with shorewall u can generate iptables scripts easily

regards

if you are not going to be setting it up for a desktop and only want the firewall NAT (DHCP) then go with

http://www.ipcop.org/

IPCop, it is a very simple and extreemly powerful firewall that will handle NAT for you. you burn the ISO, read the FAQ, insert the CD, boot the computer from the CD, follow the onscreen directions, once you are rebooted a few times. (need to configure each of the NICs you will be using at least 2 of them) you are finished.

then just hook it up to either your 56k modem, ISDN modem, xDSL modem (internel or externel) or cable modem and away you fly.