Re: Which distro is best for me?

From: Jay \ (boogie350_at_NOSPAMyahoo.com)
Date: 09/21/03


Date: Sun, 21 Sep 2003 19:50:26 -0000

Davorin Vlahovic <A-Burn@fly.srk.fer.hr> wrote in
news:slrnbmqt3t.4su.A-Burn@afrodita.home.lan:

> In article <Xns93FCBAB18CCDCboogie350NOSPAMyahoo@216.168.3.44>,
> Jay "Boogieman" Edwards wrote:
>> Davorin Vlahovic <A-Burn@fly.srk.fer.hr> wrote in
>> news:slrnbmpg9a.2dp.A-Burn@afrodita.home.lan:
>>
>>> In article <Xns93FC9A9276D5Bboogie350NOSPAMyahoo@216.168.3.44>,
>>> Jay "Boogieman" Edwards wrote:
>>>> Hello all...
>>>
>>> Hello ;)
>>
>> 'SUP?
>
> ;)
>
>>> To the outside, open only SMTP, and redirect inbound traffic for the
>>> game server just to ports required, and close everything else (of
>>> course, use ESTABLISHED and RELATED states in netfilter). Of course,
>>> you'll be using masquerading. This will keep you safe from worms.
>>
>> Which brings up a question. Can the NAT/masq traffic go through the
>> router to the PC's correctly? This machine would be connecting to the
>> NAT router...
>
> Well, you cat reroute the inbound traffic from the net to the gateway
> to some machine in the LAN...like this:
>
> iptables -t nat -A PREROUTING -i eth0 ! -s 192.168.0.0/24 --dport 80
> -j DNAT \
> --to 192.168.0.10:80
>
> This reroutes all the traffic that comes in through eth0 and is not
> sent from your LAN (it's not from 192.168.0.0/24) that connects to
> port 80 on your gateway/router to the machine on your lan with address
> 192.168.0.10 to port 80.
>
> Of course, the gateway/router should have 2 NICs, and the eth0 is the
> one connected to the Internet.

Right... eth0 to the cable modem, eth1 to the WAN port on the router...

>>> To set up such a system, you have to learn how to adminster Linux.
>>
>> Ya don't say...
>
> Well, the main thing is that you either want to learn, or to protect
> your LAN ;)

Well, I had to *learn* to administer MS-DOS and ten other versions of
windows, OS/2... it kinda goes without saying I'd have to learn to
administer Linux too, if I'm gonna run it.

>>> The first thing you'll have to learn is how to use a text editor and
>>> know the following files (you're a newbie, use jed, but I prefer
>>> vim):
>>
>> Umm... *nothing* and I do mean NOTHING can be as bad or hard to use
>> as MS EDLIN!!!! How hideous!!!
>
> Ever tried using sed? :)

No, but I'll keep it in mind as something I probably won't want! :-)

>> My old DOS favorite was QEdit... Nice little program... still have it
>> too...
>
> I believe you can find it for Linux, too ;)
>
>> As for man pages, they're great, although
>> sometimes overwhelming. There's always Google, which is priceless for
>> finding a wealth of information and help.
>
> Sure.
>
>>
>>> For iptables (this is user-space utility to manage netfilter system
>>> in the Linux kernel), you'll have to write your own script, so I'll
>>> advise you to learn how to write your own shell scripts.
>>
>> Hahaha! I'm certain that iptables *could* have been described in
>> somewhat less, shall we say, "SYSADMIN" terminology. Like, "iptables
>> defines your firewall/NAT functionality" would have sufficed.
>
> O.k. iptables sets stuff needed to firewall the 'puter. Satisfied? ;)

Yeah... I'm better now...

>>> To check for open ports, use nmap (www.insecure.org), and to check
>>> the net from outside, go to http://www.grc.com and find the shields
>>> up or something like it to see if and which of your ports are
>>> open...
>>
>> Yup... used both on Win32 before...
>>
>
> Great.
>
>>> Of course, read sites that scream "HOLE FOUND!" ;))
>>
>> In windows it's safer to just assume that the "back wall" has
>> collapsed!
>>
>
> ;)
>
>>> Don't install XFree86, you don't need it. The less systems you've
>>> got up, the less is the chance something's gonna get wrong.
>>
>> On the server, I agree. But I also want to set up Linux on my other
>> boxes, which would be used for a variety of things which would pretty
>> much require an XFree86 server be initialized to run. Although *I*
>> personally don't mind working in a text-only environment, everyone
>> else around here would shout till the roof comes down if they didn't
>> at least have a GUI.
>
> I was talking only about the server ;)

Okay... good. That can be all console as far as I'm concerned. Hmmm... Do
you think Linux could pull off being a combo fileserver, gateway/firewall
and dedicated Q3 server simultaneously on a K6-3 400 w/512 PC100? I
*know* windows would choke on that...

>> Booting lite goes without saying. I don't like a lot of services and
>> unwanted BG programs running. Actually, in my case it would be
>> "192.168.2. : ALL:"
>>
>
> Whatever ;)

Just because that's the range my router has set up internally.

Anyways, last night, I played a few rounds of Q3 before bedtime and all
was fine. I came in here this morning and all was fine... made a store
run and w2k decided I didn't need my sound card installed anymore. I did
nothing, nor was anyone else even here, during the 1/2 hour I was gone,
so evidently windows just decided it was gonna screw up stuff for no
apparent reason. There was no power outage indicated on the voltage
monitor I have connected to the line (it stores any kind of power event
such as low/high voltage, outage, etc. - the LED would have been flashing
amber if there had been an alarm state). Checking it's memory showed
nothing out of range or anything. So, what gives?



Relevant Pages

  • Re: mail server/wireless lan question
    ... > I have a CM connected to a Netgear MR314 router. ... Windows reports the wireless link to be ... None of this seems to be related to the load on the Linux ... when not connecting to the Linux box) clearly shows that ...
    (comp.os.linux.misc)
  • Re: Network Problem
    ... the only Usb port on the 1000SW 2Wire modem/ router. ... Ubuntu Box...or any other Linux box to converse with your 2wire router is ... computers and then connecting it to the ethernet connection on the ...
    (Ubuntu)
  • Re: Confusing gateway/FW project - need help bad!
    ... ...all boxes have internet as well as intranet access. ... address" setting in the router enabled but disable DHCP on the LAN. ... I was going to change it over to Linux eventually anyhow, ... I have eth1 removed from the box as I figured I'd get eth0 ...
    (comp.os.linux.networking)
  • Re: Sharing internet with a router
    ... connected modem to computer, ... The router is connecting to your ISP - at least the status page for the router ... See if the router supports MAC address filtering. ...
    (microsoft.public.windowsxp.network_web)
  • Re: uCLinux on Samsung S3C4510B (ARM7TDMI) based wireless router
    ... serial port or printer port, ... linux or further. ... > router, access point and print server, all at the same time, preferably ... > and openap-ng) options as well as uCLinux. ...
    (comp.os.linux.embedded)