Hey guys its my n00b ass again.

Im wanting to use linux and a small computer as a firewall See
Any way im wondering what is the best firewall program to use out there? I know of firewall builder, ipcop, Smoothwall, and Coyote Linux. They all seem good but which one the is the best? Which one is the easiest to use? Also ill be using mandrake 9.2. When i go to install it on the computer should i check the box that says that the computer will be used as a router/ firewall during the setup screen? Also what kind of cables do i need to use? Im connected to the internet via a cable modem. So do i just run a crossover cable from the modem to the firewall and a crossover cable from my computer to the firewall?

Now, the thing im really having trouble with is how this whole hardware firewall stuff works. I have been using sygate personal software firewall for some time now. When something trys to access the internet sygate will ask me if i want to let it. But how does a hardware firewall do this?


Thanks for any info!!

Google for

Linux
Router
Project

All firewall software in Linux with Kernel 2.4 are nothing more than front-ends to iptables.
iptables is the firewall subsystem for Kernel 2.4

Nothing is better than doing everything by hand.
So if you want to learn more about iptables, go to netfilter.
http://www.netfilter.org/

But if you want some links to firewall software and scripts.
http://firegate.sourceforge.net/
http://firestarter.sourceforge.net/
http://www.shorewall.net/
http://www.ipcop.org/
http://www.fwbuilder.org/
http://muse.linuxmafia.org/gshield/

It doesn't.
A firewall should always be able to make these decisions without human intervention.
A good rule of thumb is to block everything and allow access to certain ports, ips, etc.

As for the cables, the cable that connects your computer to your cable modem is a straight-through cable.
The cable that connects two computers is a crossover cable.

You could also try the freesco linux.
http://www.freesco.org/
A one floppy linux router, dchp, firewall, dial up, dial in, ethernet router. This run right of the floppy.

For understanding firewalls the book Linux Firewalls is a good read - if a bit long . It explains almost evrything about iptables & gives some good default examples that are really usefull in setting up a good firewall (after tweaking it to your needs).

I recommend the IPCop firewall distro ( http://www.ipcop.org ), it's easy to install, comes with features such as Squid caching proxy, Snort Intrusion Detection, A web Interface, and is very secure/stable.

How does smoothwall compair to ipcop? I like the way the smoothwall interface looks, looks simple and easy to use. Does smoothwall have squid?

IPcop is a fork of smoothwall...

Smoothwall has 2 versions, commercial, and GPL

IPcop only has 1, GPL, this means all the devolopment/features goes into the free version.

I am using ipcop now, moved over from smoothwall for the reason given in the above post. I have been happy with both of them.