is this firewall set-up OK to use

[louise_c...@my-deja.com]

hello,
I want to try and set up a firewall, but can I do it using this netwrk
layout??;

HOST A: would be where the fire wall is installed. It will have two
interfaces. eth0 will point to my connection line to the WEB, eth1 will
hopefully filter the
incomming traffic from the web, this connection will go to a mini-hub

HOST's B & C ( a workstation and a web server) are attached via the
mini-hub to HOST A.

Will the above setup actually work ???. Thoughts and advice greatly
appreciated.

thanks,
Louise

Sent via Deja.com http://www.deja.com/
Before you buy.

[Mogens Valentin]

louise_c...@my-deja.com wrote:
>
> hello,
> I want to try and set up a firewall, but can I do it using this netwrk
> layout??;
>
> HOST A: would be where the fire wall is installed. It will have two
> interfaces. eth0 will point to my connection line to the WEB, eth1 will
> hopefully filter the
> incomming traffic from the web, this connection will go to a mini-hub
>
> HOST's B & C ( a workstation and a web server) are attached via the
> mini-hub to HOST A.
>
> Will the above setup actually work ???. Thoughts and advice greatly
> appreciated.

This setup is used with lots of small, private networks. How good it is,
depend upon the chosen firewall and the rules implemented. Are you using
ipchains? If so, get a grab on 'Linux Firewalls' by Robert L. Ziegler,
ISBN 0-7357-0900-9.

Also consider your type of inet connection. If you've got a desent
router (isdn/adsl), chances are you can setup some filters there as
first line of defense.
--
Regards, Mogens Valentin
SysAdm http://www.quizpeople.com - vale...@quizpeople.com
Private http://www.danbbs.dk/~monz - mo...@danbbs.dk
I use http://www.linux.org - OpenSource, freedom of choice

[Steve Cox]

<louise_c...@my-deja.com> wrote in message
news:8lmnmd$ge2$1...@nnrp1.deja.com...

> hello,
> I want to try and set up a firewall, but can I do it using this netwrk
> layout??;
>
> HOST A: would be where the fire wall is installed. It will have two
> interfaces. eth0 will point to my connection line to the WEB, eth1 will
> hopefully filter the
> incomming traffic from the web, this connection will go to a mini-hub
>
> HOST's B & C ( a workstation and a web server) are attached via the
> mini-hub to HOST A.
>
> Will the above setup actually work ???. Thoughts and advice greatly
> appreciated.
>
>

> thanks,
> Louise
>
>
> Sent via Deja.com http://www.deja.com/
> Before you buy.

This is the standard SOHO solution. With your definitions, eth0 is the
external
interface, eth1 is the internal interface (connects to the internal/local
subnet with
machines B & C)

Have a look at www.linux-firewalls-tools.com for a script to help build
a firewall for this.

[Anders Gulden Olstad]

Steve Cox <ste...@antispam.rcsuk.co.uk.huh> wrote:
[snip]

> Have a look at www.linux-firewalls-tools.com for a script to help build
> a firewall for this.

Just a url correction.

http://www.linux-firewall-tools.com should be the
correct url.

--
Sing While You May!