Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19
Setting up a firewall box. A couple of questions.
Page 1 of 2 12 LastLast
Results 1 to 10 of 14

Thread: Setting up a firewall box. A couple of questions.

  1. #1
    Senior Member
    Join Date
    May 2001
    Posts
    353

    Setting up a firewall box. A couple of questions.

    Iīm going to set up a firewall running slackware 8.0 on an old p75 with a 500mb hd and I have some questions.

    1. How do you think I should partition the hd?

    I assume itīs wise to have /var on its own. I like logs so I guess I should make it big.
    How big is a minimal slackware installation? I canīt remember.

    Any other suggestions?

    2. How useful is the default kernel?

    I donīt have another linux installation I can use to compile a new kernel on right now, and 500mb might be a bit tight with the kernel source and gcc installed so I would like to use the default kernel (2.4.5).

    Is the default kernel useful for a firewall/gateway? It is not missing things like netfilter is it?

  2. #2

    Re: Setting up a firewall box. A couple of questio

    I would just begin the install, do an expert install (don't know if slack has that option) and choose all your packages by hand (choose just what you need). Once you start the install, you should be given an indication of how large your installation will be and so how to partition your drive. Then you can start the installation over and set up the partitions right. I would have 2 partitions: /var and / (besides swap of course). It is probably a good idea to give yourself enough room on the root partition so that 25% or so of it is left free. /var should take up all the rest of the dis space (or you could have the partition just for /var/log as long as everything is loggin there). Also you might want to think about giving yourself enough room to unpack and compile new kernel sources. As for the kernel, recompile it and go through all the netfilter options. You will probably be all right with the defualt kernel, but why not trim the fat and tweak it up a bit.

  3. #3
    Senior Member
    Join Date
    May 2001
    Posts
    353

    Re: Setting up a firewall box. A couple of questio

    I gave /var ~110Mb. I can always add another 500Mb hd and move /var there if I feel I want to save all logs. I have one around here somewhere. I think I have enough room left on / for a kernel compile.

    Now I just have to learn iptables.

  4. #4

    Re: Setting up a firewall box. A couple of questio

    I liked this book when it covered ipchains. The newer version on iptables is evern better.

    http://www.bookpool.com/.x/o4snnr6jgr/sm/0735710996

  5. #5

    Re: Setting up a firewall box. A couple of questio

    Now I just have to learn iptables.
    You won't regret it. It's the most configurable firewalling tool I've ever seen. Much more robust than ipchains

  6. #6
    Guest

    Re: Setting up a firewall box. A couple of questio




    You won't regret it. It's the most configurable firewalling tool I've ever seen. Much more robust than ipchains
    /me whispers OpenBSD's pf. Much better than ANY other packet filter in existance! Ask Ashcrow or Kint.

  7. #7
    Senior Member
    Join Date
    May 2001
    Posts
    353

    Re: Setting up a firewall box. A couple of questio


    I liked this book when it covered ipchains. The newer version on iptables is evern better.

    http://www.bookpool.com/.x/o4snnr6jgr/sm/0735710996
    Thanks for the tip. Just looking at the table of contents tells me this is exactly what I have been looking for.

  8. #8

    Re: Setting up a firewall box. A couple of questio

    Default Kernel?? Don't think so. I think you should compile everything required for your firewall design into the kernel. Don't load them as modules. You have plenty of room, as long as it's only for a firewall and not for a "real" box. Yeah, do the expert install thing and pick every program by hand...I did a full install(because I'm a little lazy) and then wen't back and did a mass uninstall to trim down the system. You definitely need kernel source though. good luck

    Oh yeah, on my slack 8.0 box I don't think the kernel had netfilter compiled in...or anything related to iptables for that matter.

  9. #9

    Re: Setting up a firewall box. A couple of questio




    /me whispers OpenBSD's pf. Much better than ANY other packet filter in existance! Ask Ashcrow or Kint.
    Very true! Iptables is a great tool but it doesn't beat pf.

  10. #10
    Senior Member
    Join Date
    May 2001
    Posts
    353

    Re: Setting up a firewall box. A couple of questio


    Default Kernel?? *Don't think so. *I think you should compile everything required for your firewall design into the kernel. *Don't load them as modules. *You have plenty of room, as long as it's only for a firewall and not for a "real" box. *Yeah, do the expert install thing and pick every program by hand...I did a full install(because I'm a little lazy) and then wen't back and did a mass uninstall to trim down the system. *You definitely need kernel source though. *good luck

    Oh yeah, on my slack 8.0 box I don't think the kernel had netfilter compiled in...or anything related to iptables for that matter.
    I always do the expert install. Iīm a minimalist.

    I have been thinking about the kernel compile. I will just install slack on my desktop and compile it there then transfer it. This way I donīt have to worry about space.

Similar Threads

  1. Couple of cli questions.
    By gmoreno in forum Linux - General Topics
    Replies: 3
    Last Post: 05-20-2003, 08:14 PM
  2. Couple of questions
    By gmoreno in forum Linux - Software, Applications & Programming
    Replies: 5
    Last Post: 05-01-2003, 03:01 AM
  3. MOVED: Couple of questions
    By Rastar in forum Linux - Software, Applications & Programming
    Replies: 0
    Last Post: 04-30-2003, 12:30 AM
  4. A couple of Redhat questions...
    By BruceLeroy in forum Linux - Software, Applications & Programming
    Replies: 19
    Last Post: 01-15-2002, 02:00 AM
  5. a couple of questions
    By possumpuss in forum Linux - General Topics
    Replies: 9
    Last Post: 12-26-2001, 02:28 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •