Re: web server + router on the same box



scottnews@xxxxxxxxxxx wrote:
I've started playing around with Linux and Apache lately and am
wondering if it would be secure to put a web server and wireless
router on the same box. Are there security risks? Is it more
conventional to put the router and server on their own boxes?

All wireless has their potential hazards and much depends on the settings you
select for your router, keep a high encryption (at least wpa) and allow
connections only from known MAC-addresses (it's not difficult to spoof a
MAC-address, but it still complicates it at least for script kiddies).

You can still limit the rights of those that are connected via the wireless
router, so they don't have access to any services on the webserver, you just
NAT them out to the net, easy to use tool would be FireStarter, which has an
easy GUI with which you can setup default rules (remember the GUI you don't
need to run more than the one time you configure the iptables rules).

I'll probably use Fedora Core and Apache. I'm not sure what router
application to use. Would you recommend the one that comes with
Fedora?

FireStarter is a good GUI to use to setup NAT.


I'll be using an old 500 MHz Dell Inspiron. I'll have to buy a
wireless NIC for the the router side. Any recommendation for a NIC
that has an antenna on a cable?

I would suggest a simple Access Point (AP) that you connect to a standard
network card, this way you don't have to hassle with wireless drivers.


--

//Aho
.



Relevant Pages

  • Re: My Network Places
    ... Usually, in a situation like that, the owner of the router that is actually connected to the Internet, configures the router so that each individual users is isolated from the others. ... I'm not sure why you are using a bridge and separate wireless router rather than merely wirelessly connecting direct to your "provider's" router, but there is a definite plus: because you have your own wireless router, you can effectively isolate yourself from the other users on your provider's router. ... As soon as you click the "Save Settings" button, you will lose your connection, because your computer will now be on a different subnet. ... It does not provide any security and it may cause problems, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Networking Question - VLANs on SBS 2003 Premium SP1
    ... DHCP running on the router. ... Set the DHCP on the router, to make a exclusion of IP range. ... you can set the SBS use fix IP by run the CEICW. ... all gust wireless clients will get IP address from DHCP on the ...
    (microsoft.public.windows.server.sbs)
  • Re: bouncing connection and a netgear router..
    ... The WGR614 wireless router does NOT have a built in DSL modem. ... benchmark test between the 2nd laptop and her wireless laptop. ...
    (alt.internet.wireless)
  • Re: Two Netgear WGT624 models will not communicate
    ... |>the diagrams as communicating with a WGR614 router. ... The print server connects via 802.11 to the wireless ... | wireless bridge mode because wireless bridges only talk to other ... I think that will be a client need. ...
    (alt.internet.wireless)
  • Re: Two Netgear WGT624 models will not communicate
    ... the diagrams as communicating with a WGR614 router. ... The print server connects via 802.11 to the wireless ... But the _standard_ should not rule out anything. ... There's not one mention of any Layer 3 technology in 802.11. ...
    (alt.internet.wireless)