Hi all,

at my home I have four computers, and I decided to use one with two NICs as dedicated gateway for my home LAN.

I know that I should exclude all services which I do not need, so I am asking all of you out there is there some good manual, howto or something else to instruct me to read in order to understand how to prepare kernel for this specific task, because the gateway will be fist line of defence of my home network. I am asking only for good reading on this topic.


Thanks in advance

Regards

i found this: http://www.stanford.edu/~fenn/linux/

but honestly, there really isn't that much to it IMHO (of course it depends on what exactly you want the gateway to do)... if you decide to ask more specific questions i'd be glad to help you out if i can...

just my ...

Thanks, at first moment I was wondering am I asking very strange or difficult because nobody answering me ...
so more specific I want to make linux router( gateway ) for my home network, Gateway will be debian based , because I like debian, and I am going use it for gateway's operating system

;gateway;---------;switch;======;internal computers;

so I know that I should prepare kernel on gateway machine in order to exclude all necessary services and make it thin as possible, I am hoping you understand what I writing about.

So I googled and conceptually I know what to do but I just need some docs, howts, or whatever else in order to read and prepare ( first myself ) my getaway to be fully compliant and good barrier to protect my internal network.
Books, links, howts, .... related to firewals, kernel preparations, service management are welcomed.

Thanks in advance

if the only thing you want it to be is a router, then you don't need to have any services running on it... you just need to learn iptables...

http://wiki.linuxquestions.org/wiki/Iptables

http://iptables-tutorial.frozentux.n...-tutorial.html

Services aren't built into the kernel, so you don't need to recompile the kernel to turn them on or off. Most versions of Linux either use a control script or utility for turning services on or off. but the services themselves are usually executable binaries that you can run from the command line.

However, you can perform kernel hardening to prevent things like buffer overflows. There are several links to kernel hardening tools in the Security References thread near the top of the forum, if that's what you're looking for.