Re: cable modem access

[David Lang <dlang () diginsite com>]

-----BEGIN PGP SIGNED MESSAGE-----

For my cablemodem I setup a linux box with masquerading (many->1 NAT) and
am comfortable with using that for my firewall. (I have since added a
couple of proxys from the FWTK to allow me to connect in from the outside,
but that may be a special case).

The problem you will run into is that whatever platform you use for the
firewall, you will face a learning curve and the first version will
probably not be secure. There are HOWTO's included with every
Linux distribution that give you fairly good step-by-step instructions on
what you need to do. You should also get general books on firewalls to
learn why you are doing what you are doing (assuming you don;t already
have that knowledge).

As you are learning, take the time to compleatly blank the system when you
go to re-do it in case someone has gotten in in the meantime.

David Lang



 On Wed, 14 Apr 1999, twalls - Troy Walls wrote:

> Date: Wed, 14 Apr 1999 08:50:21 -0500
> From: twalls - Troy Walls <twalls () acxiom com>
> To: "'firewall-wizards () nfr net'" <firewall-wizards () nfr net>
> Subject: cable modem access
>
> I know this group is dedicated to helping network administrators with firewall issues that they deal with at their 
> workplace, however, I have a slightly different twist on my problem.  It is not directly workplace related.  
>
> I have a cable modem at home.  I have some concerns about the security of the setup.  I have this installed on a 
> stand alone machine whose only function is internet access.  I want to change that and put three other machines on 
> the cable modem through a network.  I have installed Cat 5 cable, and purchased a 10/100 hub for this activity.   
>
> I have considered a linux server as a front end and firewall, however, it will be a learning experience to get it up 
> an running. Is it the best option as a firewall?  Are there better options?  I have a win95, a win98, and a NT4.0 
> workstation that I want to put behind a firewall.
>
> My question is how can I protect those machines.  I have another machine that I can use as a firewall box. I just 
> don't know what is available for my type of arrangement.
>
> Any help or suggestions would be appreciated.
>
> Thanks
>
> Troy Walls
> Acxiom Corp.
> 501-336-2865
>
> twalls () acxiom com

"If users are made to understand that the system administrator's job is to
make computers run, and not to make them happy, they can, in fact, be made
happy most of the time. If users are allowed to believe that the system
administrator's job is to make them happy, they can, in fact, never be made
happy." 
- -Paul Evans (as quoted by Barb Dijker in "Managing Support Staff", LISA '97)

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQEVAwUBNxUmMj7msCGEppcbAQEeBAf/Zh+2V7S90gsoJVEphbeDCnfpXm7AcCxj
fDoCbaDDxqmRBLfFx92L5+XALPZV6QeqcOi5+6BTOy7OIkOGMOhqar7AoXVSY3h/
Nah0x6DDh8h47io6Itw6XtqGjDBZyRDw1kOiv85oZuA/gPC6S4IexSUpDflacp8H
nSCDkLR8unzN//L5salFFr5aRrDT4B4pHk7SJ+SeufS0N9CyWvNyXMpQ5tkudm2d
F3hc+E2hKqcJ1IGVIQr2uzny0XX2OHhCWUVuBHgAfettYTgDoYDt5WOplOANs+6D
HSaVsOaXZFLoG/rfWTTa3eXBKxBVc3wDIMSqdsx6QuMSN0LMpUkeUg==
=He9Y
-----END PGP SIGNATURE-----