Hardware firewall question...

TheNetNewbie · Post by **TheNetNewbie** » Tue Feb 10, 2009 4:52 pm

Hey guys now that my server is up and running well i am tryin to do this ASAP heheheeh, i have a computer that i plan on using as a hardware firewall...

This is my current set up:
CABLE MODEM FROM MY ISP
||
Server 2003(Acting as DHCP, DNS, RRAS, giving all other pcs access to the internet)
||
Switch(Wireless w/ ports)
||
WORKSTATIONS

where would i plug my hardware firewall in? i was thinkin if i plug it in in-between the cable modem & server that doesnt make sense cause then my firewill will need to act as DHCP and DNS? and if i plug it in in between switch and server then my server has no proctection since line running from cable modem to server is not affected by my hardware firewall?

i may be wrong on any of these thoughts that is why i am asking for help, some 1 shed some light before i get owned. lol

TheNetNewbie · Post by **TheNetNewbie** » Tue Feb 10, 2009 5:56 pm

Post by **YeOldeStonecat** » Tue Feb 10, 2009 6:43 pm

In between your modem which is in bridged mode (which most cable modems are)...and your network.

You would set your server to run on a single NIC, not dual NIC.

Your server would still run as the DHCP service..and be the DNS server for your network. See my linked article in your other thread about the server.

Post by **YeOldeStonecat** » Tue Feb 10, 2009 8:32 pm

Summery of IM conversation....

Devil Linux as your NAT router/firewall for network.

Red/WAN NIC set to obtain auto
Green/LAN NIC set to 192.168.1.1
DHCP service disabled.

Server
192.168.1.100/255.255.255.0
Gateway of 192.168.1.1
DNS of 192.168.1.100

DNS forwarding set to your ISPs DNS servers, or OpenDNS servers

DHCP running on the server, set to hand out
192.168.1.101 to 192.168.1.150 or something
255.255.255.0
Gateway of 192.168.1.1
DNS of 192.168.1.100

Your Linksys router set with a LAN IP address of 192.168.1.245
DHCP service disabled on the Linksys router
Uplinked to your main network using the LAN ports...you will not use the WAN/Internet port of it.

bilbus · Post by **bilbus** » Fri Feb 13, 2009 6:11 pm

If you got a hardware firewall, you would remove the server with rras, and replace it with a firewall.

RRAS is awful by the way.

Also you can remove the second nic from the rras server and make it a member server.