firewalls 101 - what goes where

Hi -

I just got hooked up with a Comcast modem and I'd like to setup a firewall.
I'm looking for a FAQ or some input on what to install where. Computer A
(Linux) is going to be the firewall and computers B, C, (windows) and D
(linux) are family members. I want to be able to host a WEB site that is
visible to the rest of the world.

Here is where I need help - please correct my assumptions. Computer A gets
two Ethernet cards one to the modem (static IP address) and one to a hub.
'A' will need a DHCP server for systems B, C, D and will host the firewall
and implement masquerading (no small feat given my current Linux skill
level). Where does Apache go? I'm assuming on A. Could it go on B, C, or
D? What other software do I need to set up? What other cool software could
I setup? Can I collect our e-mail and filter for viruses on system A too?

Just curious, but will the firewall block out all of those annoying pop-up
ads (computer B is currently attached to the Comcast modem and the ads
arrive ALL the time)?

Suggestions and comments appreciated! Thanks for the help!

Gary

On Sun, 7 Sep 2003 20:17:26 -0600, "Gary N."
<gary.newell@nospam.intel.com> wrote:

>Hi -
>
>I just got hooked up with a Comcast modem and I'd like to setup a firewall.
>I'm looking for a FAQ or some input on what to install where. Computer A
>(Linux) is going to be the firewall and computers B, C, (windows) and D
>(linux) are family members. I want to be able to host a WEB site that is
>visible to the rest of the world.
>
>Here is where I need help - please correct my assumptions. Computer A gets
>two Ethernet cards one to the modem (static IP address) and one to a hub.
>'A' will need a DHCP server for systems B, C, D and will host the firewall
>and implement masquerading (no small feat given my current Linux skill
>level). Where does Apache go? I'm assuming on A. Could it go on B, C, or
>D? What other software do I need to set up? What other cool software could
>I setup? Can I collect our e-mail and filter for viruses on system A too?

1) Comcast doesn't do static IP addresses - configure for DHCP.

2) Look at shorewall - it will simplify your life.

3) Personally, I have my apache on the firewall system, but there are
several ways to do it.

4) Yes, you can run a mail server with spam and virus filters.
(Sendmail, mimedefang,f-prot-clam, and spamassassin)

>Just curious, but will the firewall block out all of those annoying pop-up
>ads (computer B is currently attached to the Comcast modem and the ads
>arrive ALL the time)?

Privoxy and squid, in series.

>Suggestions and comments appreciated! Thanks for the help!

You don't mention what linux distribution you're using, but it looks
like you want a duplicate of my system :-)> Email me if you want -
I'll try to help.

Mike-

Mornings: Evolution in action. Only the grumpy will survive.
-----------------------------------------------------

Please note - Due to the intense volume of spam, we have
installed site-wide spam filters at catherders.com. If
email from you bounces, try non-HTML, non-encoded,
non-attachments.


----== Posted via Newsfeed.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeed.com The #1 Newsgroup Service in the World! >100,000 Newsgroups
---= 19 East/West-Coast Specialized Servers - Total Privacy via Encryption =---