Re: [Sheflug] Firewalls, routers, gateways

[Barrie Bremner <nospam [at] ecosse.net>]

Good news, but problems (isn't there always?),


 Well, noodles is at least running now, sans one drive....it's got a
monsterous 420Mb drive in there (the 300 is actually in a 4mb 486 I
still haven't bothered reviving - and probably never will).
 ssh is setup, all services other than ssh and auth have been shut off,
and it's running portsentry and monitoring power as a slave via apcupsd
(which I need to test, but the UPS makes a hell of a racket when the
juice goes, so I'll leave that until the morning ;-)
 It's got kernel 2.2.16 (patched) and ip_masq looks to be setup,
however:


 "ifup ppp0" fails with an error 6. Whatever the hell error 6 is. Ideas?


"Stephen J. Turnbull" wrote:
> 
> >>>>> "Barrie" == Barrie Bremner <TheEnglishman [at] ecosse.net> writes:
> 
>     Barrie>  Stupid question - Can I keep the modem attached to flux,
>     Barrie> whilst having noodles as the gateway/router/whatever?
> 
> You can, but it's conceptually confusing and technically difficult.
> The concept is that _all_ traffic must be vetted by the firewall
> before any other machine tries to process it.  But that basically
> means that all routes out of ppp0 must go to noodles.  This is
> confusing to think about and fragile to set up.
> 
 This might have to happen - depends on how I do with setting up noodles
to bring the ppp link up.
 I have installed mserver, but haven't used it until I (or more like
everyone on ShefLUG :-) debugs ppp.

> 
>     Barrie>  Could I get all this onto the 300Mb drive? I should hope
>     Barrie> so.
> 
> I believe the Linux Router Project distro fits into about 10MB,
> Debian's minimal distro into 25MB.  Add the dialer stuff if it's not
> already there and sshd etc, you're still not going to be over 30MB.

 Well, not quite 30 Mb. I had a look at the LRP, but their docs are next
to nonexistant, so I skipped that.
 Most mini distros ended up looking a bit wierd, and I don't have a
Debian disk.

 RedHat seems a bit bloated - it ended up a 230Mb.

 I have got all the stuff required to build package though. Did the
kernel rebuild on Flux, and all the little things on noodles.
Installer put sendmail and some other crap on there...I've turned it all
off, but I'll uninstall later.
--
Barrie J. Bremner

Email:     TheEnglishman [at] ecosse.net
           (PGP public key available at pgp.mit.edu)

URL:       http://www.geocities.com/thefatenglishman

Telephone: UK 01672 811246
Mobile:    UK 07968 792975

Quis custodiet ipsos custodes?
---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.