Re: Firewall with PCI ADSL Card

From: Nick Cross (no-return-address_at_127.0.0.1)
Date: 12/08/03 

Date: Mon, 8 Dec 2003 20:02:08 -0000

"erik" <erik@geenspam.vanwesten.net> wrote in message
news:3fd129cd$0$203$e4fe514c@news.xs4all.nl...
> Coutancais wrote:
>
> > Hello,
> >
> > Has anyone ever used an internal ADSL modem ?
> > If so, then maybe someone can help me :
> > I know one can do a firewall[ing bridge] with 2 "normal" network cards
> > on a linux box.
> >
> > But is it possible when one interface is an ADSL PCI card ?
> >
> > ('coz it's pppoe getting out of the ADSL card and it seems like
> > Netfilter doesn't see it, as pppd manages ppp trafic)
> >
> > The goal is to put everything in ONE box instead of modem + fw.
>
> Filtering on ppp should do. Haven't tried it though with an internal
> card.
>

I do it with a USB ADSL modem (havent bought my PCI one yet) and it works
fine, netfilter (iptables), QoS (htb) and snort are go!

I filter/QoS on ppp0 (internet) eth0 (internal) and eth1 (wireless) none
have a problem.

Nick.

Relevant Pages

  • Google Summer of Code 2009: Student applies to optimize netfilter
    ... So I need a kernel developer who does the mentoring of this student, preferably from the area of netfilter. ... It would be also nice to know perhaps if he should better also apply at other mentoring organizations and at which once to find a mentor more easily. ... To contact him directly you need to apply as a mentor on http://socghop.appspot.com/ and select the Linux Foundation as the mentoring organization. ... I have also taken courses related to synthesis, optimization and computer networking in my Masters program. ...
    (Linux-Kernel)
  • If you didnt believe in strict OUTPUT filtering
    ... Linux Netfilter NAT/ICMP code information leak ... first packet of a connection is hitting a NAT rule, ... They are working on a new patch. ...
    (comp.os.linux.security)
  • Re: choosing between ipcop and iptables
    ... You misunderstand the difference between IPTables, IPCop, and Netfilter. ... - - Netfilter is the firewall built in to the Linux kernel. ... IPTables is exists in almost every Linux distribution, ... If you don't have a firewall, and have a computer that you can dedicate to the ...
    (comp.os.linux.security)
  • Re: Linux Firewalls
    ... > you do a shutdown -h on a Linux box, that is running Red hat 6.2. ... > Also if this is true, can your firewall be exploited or even the NatD ... If you do a shutdown -h the box goes off, no ip forwarding possible, ... you should be using iptables (netfilter) on ...
    (Vuln-Dev)
  • Best way to intercept inbound and outbound TCP packets
    ... was looking into NetFilter framework which is part of Linux kernel now. ... platforms.Though i have yet to discover what kind of interface IPFilter ... kernel module provides, i would like you to help me to to decide this ...
    (comp.os.linux.networking)