[ILUG] Firewalls... linux -v- BSD

[dude ilug]

>
>
> What's the issue with NAT?


I haven't had any issues with it tbh, Unless it's responsible for some of
games which are not working right online yet for me.

There was a question earlier to the effect of "tell me something good about
nat".

So I wanted to draw from that and learn how else to solve this particular
issue, and what would be better about the non-nat approach and why.

I have yet to try some of the suggestions, but I'm thinking this may be a
plus from Nat, in terms of simplicity at least, though maybe not if I want
voip or ftp etc through the nat. That I can live with.


At this stage I really don't see how it's bad in a home network.


I'd still be inclined to agree,  for my case.

The simplest way here would be to have the (linux) firewall as the only
> device as far as Magnet or whoever is concerned.


Then on the firewall/gateway just setup dhcpd which is very simple to do on
> any
> recent distro.



That would've been my default config, but been there, done that, so it would
also teach me nothing :)

>
> > Corrected diagram is :
> >
> >
> |ISP|------|ISPsRouter|----|MyFirewall|----------|My_Home_Pcs_With_Public_Ip_Addresses|
> >
>
> If you really want to go this route (pun sort of intended, sorry if
> thats lame), then you have one of two options.




1. Get the routing on the Linux box right so that it knows where and how to
> route the public
> IPs of the home PCs. If these IPs are not always the same then that
> could be a problem, not to mention I'm not actually sure what the
> routing would look like.


I've no idea yet what i might look like either, or what addresses the
interfaces on this device could be set to, etc etc.
The ip are  dynamic, they charge for statics. 10e/pm afaik.

2. as mentioned, make the firewall box a bridge.


I have this on the todo list for a test.