Re: Linux Firewall or Netgear

From: Leythos (void_at_nowhere.org)
Date: 11/23/04


Date: Tue, 23 Nov 2004 12:58:53 GMT

In article <WPFod.22684$08.8019@fe2.news.blueyonder.co.uk>, delete007
@blueyonder.co.uk says...
> Hi all, I am quite new to firewalls, and have previously only used Zone
> Alarm on networked clients and gateways. I am currently setting up a network
> and had originally thought of using Linux on a computer for gateway/firewall
> for the Network

The choice is yours really, a PC running a firewall or a small appliance
that is a very low-end firewall that supports IPSec tunnels between
points.

> The internet connection is a 512K ADSL MODEM. The network will be 1
> logon\DHCP Win 2000 Adserv, and 4 XP Clients.

Your connection, is typical of a small office. I would have expected
that with the price of 200 Advanced Server that they could have afford a
first class firewall, but your choice of the FVS318, while not a upper
end firewall, does offer most of the needed features of a high end NAT
box that will protect them.

> I feel confident in setting up a simple Linux firewall (Smoothwall), but
> which one offers the best protection or is more suited to my network?

Neither, you need to pick the one you are sure you can setup based on
the rules you determine will protect their network. If you pick
something new, something you've never worked with, you may not configure
it properly and it may leave them exposed.

> Bearing in mind that I would also like to have VPN Access.

2000 Advanced Server can be setup as a VPN Server and supports simple
PPTP inbound sessions. The FVS318 will allow you to setup inbound PPTP
sessions mapped to the server. Don't use the device to for VPN to the
network, use the server.

> "Linux Firewall" or something like the "NETGEAR FVS318 8 Tunnel VPN/Firewall
> Router with 8 x 10/100 Switch"
>
> What is the best firewall/configuration setup?

One that you have experience with that you know can secure their
network, one that you are SURE you have setup correctly.

> Ps I don't have static IP!

This is where you may be screwed when it comes to VPN's. If you don't
have a static IP then you will have to find a means to let you know what
the new IP is (Dynamic DNS registration service).....

I can't understand how the client can "afford" windows 2000 Advanced
Server but can't afford a business class internet connection or a
business class firewall device?

-- 
-- 
spamfree999@rrohio.com
(Remove 999 to reply to me)


Relevant Pages

  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz2000)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.windows.server.sbs)
  • Re: need help re. office network install
    ... > and their network is a mess, the result of years of neglect. ... they have a gateway server w/ no special ... > firewall rules on it, they have a large DMZ that serves no purpose ... install anymore software on the firewall machine than is absolutely ...
    (comp.os.linux.networking)
  • Re: oops again
    ... open on the Firewall, and the default should be none. ... Since you intend to install IIS purely as a test server for your ASPX pages ... Make sure that IIS is only listening on the local network (192.168.x.y ...
    (microsoft.public.inetserver.iis)