Baslinux mailing list

[sindi keesan <keesan AT sdf.lonestar.org>]

> > > How do we set up IP-masking firewall?
> >
> > I suggest you start with BL1.  It was designed for
> > this purpose (see netsetup in BL1).  Floppy version
> > works fine -- insmod, ifconfig, route, ipfwadm.
> > Then ppp-on and you will be able to share that
> > connection with the rest of the TCP/IP network.
>
> For BL3 would we need to insert additional modules or use the larger
> kernel?

The network module 3c59x.o does not insert for my card in BL1 -
Unknown 3Com PCI ethernet adapter type 7646 detected:  not configured.
I got it from Slackware 3.5 (kernel 2.0.34).  BL1 is working fine online 
right now.  I found the lines for route and ipfwadm in the help files at
the old BL1 site.

> > --------------------------------
> > route add default gw 192.168.1.1
> > --------------------------------


First I insmod 3c58x (network module) but will need to use BL3 or BL2.
ifconfig eth0 192.168.1.1 for the computer which will not be connected to 
the netword, 192.168.1.2 for the one that will (gateway).

Then I type:

route add -net 192.168.1.0      (on both computers?)
route add default gw 192.168.1.2  (on the non-gateway computer?)

Can this go into rc.S or rc ?

> BL2 does not have ipfwadm.  Do I put BL1 (ramdisk or floppy disk) on both
> computers or just one?
>
> I will download BL1 and look at netsetup.
and the helpful files at the BL1 site.

Set up a firewall (on the gateway computer?) using ipfwadm (which BL1 has, 
and it is in tcpip2 for BL2).

ipfwadm -F -a deny
ipfwadm -F -a m -S basicnet/24
ipfwadm -F -a deny -S 127.0.0.0 -W ppp0
ipfwadm -F -a m -S basicnet/24 -W ppp0

I will try with BL2 after getting ipfwadm.

Sindi