[ILUG] Firewalls... linux -v- BSD

[Daniel Shaw]

>
> I don't -want- nat. I just want a firewall inside the router that i control.

What's the issue with NAT? This is not a troll, but an honest query.
At this stage I really don't see how it's bad in a home network. The
simplest way here would be to have the (linux) firewall as the only
device as far as Magnet or whoever is concerned. Then on the
firewall/gateway just setup dhcpd which is very simple to do on any
recent distro.

>
> Corrected diagram is :
>
> |ISP|------|ISPsRouter|----|MyFirewall|----------|My_Home_Pcs_With_Public_Ip_Addresses|
>

If you really want to go this route (pun sort of intended, sorry if
thats lame), then you have one of two options. 1. Get the routing on
the Linux box right so that it knows where and how to route the public
IPs of the home PCs. If these IPs are not always the same then that
could be a problem, not to mention I'm not actually sure what the
routing would look like. 2. as mentioned, make the firewall box a
bridge.

Iptables can work on a bridged device and you can have a completely
transparent firewall no problem. I guess it'd still be stateful
though. Again, for a simple home network I don't see that as a
problem, but am open to correction.

Cheers,
Daniel