[coLinux-users] coLinux as software firewall

[Olaf S. <ca...@gm...>]

Hiya

I`d like to know your opinion on a following solution: small and basic
coLinux debian distro functioning as a virtual router for Windows box
running that coLinux. I was inspired by:
http://colinux.wikia.com/wiki/Network#Keep_Windows_off_the_network_--_surf_via_Linux

Would it be possible to force all Windows traffic to coLinux machine and
through it, to Internet? Can we achieve total separation of windows box,
like with hardware router box used? Would it be resource-wise in regard of
cpu/mem and hdd space usage, comparing to native Windows software
firewall/IDS solutions?

Kind regards

Olaf Siejka


2008/7/7, col...@li... <
col...@li...>:
>
> Send coLinux-users mailing list submissions to
>         col...@li...
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://lists.sourceforge.net/lists/listinfo/colinux-users
> or, via email, send a message with subject or body 'help' to
>         col...@li...
>
> You can reach the person managing the list at
>         col...@li...
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of coLinux-users digest..."
>
>
> Today's Topics:
>
>    1. port forwarding problem at colinux (Menghan Zheng)
>    2. Re: port forwarding problem at colinux
>       (Josep Maria Antol?n Segura)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 07 Jul 2008 23:26:55 +0800
> From: Menghan Zheng <thu...@gm...>
> Subject: [coLinux-users] port forwarding problem at colinux
> To: col...@li...
> Message-ID: <487...@gm...>
> Content-Type: text/plain; charset=GB2312
>
> I installed Debian/testing on windows xp sp3
> I config my networks like this:
>
> on XP: I have a static ip: 59.66.143.127
> on Debian: my /etc/network/interfaces is like:
> auto lo
> iface lo inet loopback
> auto eth0
> iface eth0 inet static
> address 192.168.0.40
> netmask 255.255.255.0
> gateway 192.168.0.1
>
> I installed virtual network adapter as the tuntap way
> eth1=tuntap(from example.conf)
>
> then all goes well, colinux could connect www.google.com, and my XP can
> connect my colinux
> But now i have to start a service in my colinux at port 23(you're right,
> it's telnet).I want to share the service to the IPs outside my local
> machine,
> that is to say: ip(59.66.143.126) can telnet my colinux at port 23.
> how should i config my colinux network?
>
> //I'm sorry for my poor English.
>
> --
> Keep In Touch!
> Electronics Engineering Department, Tsinghua University
>
> Dorm Tel: 8610 5153 4319
> Mobile: 86 13401088180
> MSN: zhe...@ho...
> Email: zhe...@gm..., zm...@ma...
>
>
>
>
>
> ------------------------------
>
> Message: 2
> Date: Mon, 07 Jul 2008 19:17:29 +0200
> From: Josep Maria Antol?n Segura <ja...@pa...>
> Subject: Re: [coLinux-users] port forwarding problem at colinux
> To: Menghan Zheng <thu...@gm...>
> Cc: col...@li...
> Message-ID: <121...@im...>
> Content-Type: text/plain; charset=ISO-8859-1
>
> Your configuration is a bit unusual, (meaning that some of the solutions do
> not
> apply to you), yet there are still possibilities:
>
> First of all, your configuration only allows you to use colinux via NAT,
> because
> else, you would need a secondary *internet* IP for it.
>
> Usually, a router would do the NAT for you, so you would redirect packets
> entering a specific port to the colinux machine. In your case, you need a
> software NAT package installed in Windows, which would then map the ports.
> And
> you're lucky: there's a mode of colinux that let's you do it: "Slirp".
>
> http://colinux.wikia.com/wiki/Network#Slirp
>
> Briefly: you need to specify in the config file, the ports that you need to
> access from internet, and configure linux as dhcp (or static, with the info
> on
> that page)
>
> Note that the slirp-net-daemon shipped with the current stable release has
> a
> minor isssue with packets, and there's an updated on on sourceforge
>
>
> http://sourceforge.net/project/showfiles.php?group_id=98788&package_id=107317&release_id=385643
>
> --
>   _ _  /~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-\
>   o o  | Josep Ma [JAZ]                 |
>   *   | ICQ UIN: 7014661               |
>   `-?  | Messenger: ja...@ho... |
>       \-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~/
>
>
>
>
> ------------------------------
>
> -------------------------------------------------------------------------
> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
> Studies have shown that voting for your favorite open source project,
> along with a healthy diet, reduces your potential for chronic lameness
> and boredom. Vote Now at http://www.sourceforge.net/community/cca08
>
> ------------------------------
>
> _______________________________________________
> coLinux-users mailing list
> coL...@li...
> https://lists.sourceforge.net/lists/listinfo/colinux-users
>
>
> End of coLinux-users Digest, Vol 27, Issue 3
> ********************************************
>