IP Cop vs Smoothwall

[Nowhere]

http://bsd.slashdot.org/article.pl?sid=05/08/01/0154253&tid=230&tid=7&tid=10

http://linux.slashdot.org/article.pl?sid=05/08/06/1933229&tid=163&tid=4

Just posting links I have in my archive for possible future use...might be usefull also for you (damn, I need to move my links to del.icio.us or something like that..)

[Kooldino]

Well, at this point I'm open to anything that I can easily set up on this PC to make it route between the 192 and the 172 networks. Anyone?

[Fat Tone]

Well, at this point I'm open to anything that I can easily set up on this PC to make it route between the 192 and the 172 networks. Anyone?

If you are happy for them all to be able to see each other, could you not combine them - have IPCOP/Smoothwall do DHCP for both?

[Fat Tone]

Have you posted on the Smoothwall forums?

[Kooldino]

If you are happy for them all to be able to see each other, could you not combine them - have IPCOP/Smoothwall do DHCP for both?

Can't do DHCP...the IPs all have to be static.

[Rob(QG)]

What about using FreeSCO - http://www.freesco.org/

Should do what you want.

[Kooldino]

Tried that the other day...it couldn't find my NICs.

[Marshmallowman]

I have not tried it myself, but Mandriva(used to be mandrake) do a multiple network firewall distro, you should be able to find it somewhere on their site, unfortunately they hide all their free downloads...bit it will be there somewhere.

[Kooldino]

OMG, I have the answer!

http://www.hardforum.com/showthread.php?p=1028180505#post1028180505

Now to decide which flavor of Linux I'm going to set up on it (as opposed to temporarily running knoppix). Looking for something that's easy to configure NICs and such on, and something simple and lightweight.

[spadnos]

With that said, can you explain how exactly that worked?

By default, the system won't forward packets from one ethernet segment to the other - this just turned on that option.

Also, since it's in the /proc folder, I assume it's a daemon or something?

Nope. /proc is a system control/status area. (I don't remember what "proc" is short for).
Actually, /proc/sys/ is where "run-time tunables" are - ie, things that can be changed on the fly. A file in /proc/sys is basically an ASCII interface to some internal kernel variable.

I'm also guessing the "echo 1 >" is like saying "output a 'true' or 'on' as an input to [ip_forward in this case]"?

Thanks again.

Sort of. The /proc/sys interface takes an ASCII input, and converts it to a numeric value for the kernel. In this case, the variable that controls IP forwarding takes a 1 or a 0. 'echo' is just the Unix/Linux command to take something from the command line, and copy it to a file (or device). It's usually used to print messages on the console (its default output file is the console) - like "echo Press any key to continue".
You can also find out what the variable is set to by using "cat". The command - "cat /proc/sys/net/ipv4/ip_forward" will print a 1 or a 0, depending on whether it's turned on or not.

- Steve

[Kooldino]

(I don't remember what "proc" is short for).

I could have sworn it was "process"

Actually, /proc/sys/ is where "run-time tunables" are - ie, things that can be changed on the fly. A file in /proc/sys is basically an ASCII interface to some internal kernel variable.
Sort of. The /proc/sys interface takes an ASCII input, and converts it to a numeric value for the kernel. In this case, the variable that controls IP forwarding takes a 1 or a 0. 'echo' is just the Unix/Linux command to take something from the command line, and copy it to a file (or device). It's usually used to print messages on the console (its default output file is the console) - like "echo Press any key to continue".
You can also find out what the variable is set to by using "cat". The command - "cat /proc/sys/net/ipv4/ip_forward" will print a 1 or a 0, depending on whether it's turned on or not.

- Steve

Thank you!

[spadnos]

I could have sworn it was "process"

Thank you!

I was thinking "process" also, but I wasn't sure. These things get lost over time

You're welcome.

- Steve