[ILUG] dsl & router setup ?

[John Allman]

Declan Grady wrote:
> Hi,
> Couple of questions ...
> 1. I am changing over from satellite bb to dsl.
> 
> My satmodem ran a dhcp server, giving me a fixed ip with an ethernet
> connection to my firewall (debian with iptables, squid, etc)
> the dhcp server gave me an IP address 1 higher than my fixed external ip.
> eg, my external IP was xxx.xxx.xxx.1 , so the dhcp server gave me
> xxx.xxx.xxx.2 as an ip for my firewall's eth1.  (eth0 being my local lan)
>

I would guess with your satellite connection you were assigned a small
range of real ip addresses that were distributed by your router (which
was acting like a real router)

> Now, my new dsl box also has a dhcp server, but it gives me a local
> private ip addy instead.
> i.e. 192.168.1.xxx
> 
> The adsl2 box is a "Zyxel Prestige 660RU ADSLl2+ Ethernet/USB Gateway"
> 
> All I have done is change the variables in my iptables script to the new
> external IP.
> 
> It seems a bit more complex than the previous setup .. should I be
> setting my adsl box into a different mode and give my firewall's eth1
> the external IP ?
> As you can tell from the above I'm a bit confused, but I knwo it should
> be a simple thing !
> 

Looks like your adsl box is running pppoe and getting the single ip
address assigned to you. It's then connecting the rest of your network
via NAT

You have two choices. The best way is probably to configure your adsl
modem to act like a dumb modem and *not* run pppoe. You then run pppeo
(roaring penguin, maybe?) on your linux router. *It* will then get your
real live ip address.

Another option would be to set your adsl router to forward all of your
traffic to your linux machine. The option would probably be called
portforwarding. It's really Destination NAT. I suspect that'll be
problematic for vpn though.

> 
> 2. If I want to be able to aceess my internal LAN from the outside
> world, using doze clients, (!) am I looking at VPN, or some other means ?
> i.e. I want a secure method of accessing my internal lan through my
> firewall, to get at the internal mail server (pop3 & smtp) and possibly
> the samba server.
>

Openvpn is probably the fella for you. There's a lovely windows gui for
it at http://openvpn.se

John