Re: [LI] Gateway problems

[Vimal Mathew <vml@xxxxxxxxxxxxx>]

On Tue, 21 September 1999, John Fernandes wrote:

> 
> If I use Linux to setup a gateway to the internet on a LAN ...
   You can enable telnet(port 25) alone by editing your /etc/inetd.conf and disabling all other services. But this not the way to go for a gateway. Instead, disable telnet, ftp etc. (ie. inetd). Use an HTTP/FTP proxy such as Squid. If the users want direct FTP,IRC, ICQ etc. you could enable "masquerading" through the Linux kernel (kernel 2.2.x). With masquerading, the users using your gateway seem to be directly connected to the internet and need not telnet to your gateway...
That way, all your gateway needs running is a proxy server(you can take this off if you masquerade HTTP requests also, but the proxy may be faster), and setup the proper masquerading rules through
ipchains( use ipfwadm for pre-2.2.x kernels).
Bye,
--vml,
Model Engg. College,
Cochin


_______________________________________________________
Are you a Techie? Get Your Free Tech Email Address Now!
Many to choose from! Visit http://www.TechEmail.com
--------------------------------------------------------------------
The Linux India Mailing List Archives are now available.  Please search
the archive at http://lists.linux-india.org/ before posting your question
to avoid repetition and save bandwidth.