Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Full Gentoo server.
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
HydroSan
l33t
l33t


Joined: 04 Mar 2004
Posts: 764
Location: The Kremlin (aka Canada)

PostPosted: Sat Jun 05, 2004 5:26 am    Post subject: Full Gentoo server. Reply with quote

This may be a long post, and it may be a repost, but I really need some help, even after searching around.

What this box (a P-II 400MHz with 512MB of PC-133 RAM and a 40GB Hard Drive) needs to do is the following:

1. Be able to run a DHCP server for the network.
2. Be able to run a SAMBA server for the network.
3. Be able to have IP Masq.'ing going for the network like ICS in WindowsXP, with the same kind of flexibility.
4. Be able to basically be a downloading and file hosting server for BitTorrent and aMule. (My precious, precious BeatMania IIDX videos...)
5. Have a firewall setup for a good enough security solution.

I also plan on having some sort of MUD hosted for a friend in the near future.

I've read up on IPTABLES, but it just doesn't have the flexibility that, say, Norton Personal Firewall has.

So to sum up, what I NEED knowledge on is: A good DHCP server, IP Masq'ing, and some sort of Firewall that's nice and graphical. I don't have much time to learn completely new software at the command-prompt level, but would be willing to if required. I've already got a good bane on Samba (from the Gentoo documentation and other sources).

I mostly want to get ALL my boxes off of Windows. I've only got one box left, and thats my server. And the only thing thats keeping that is the nice ICS and Norton Firewall setup I've gotten used to.

Any help, either links to older topics, CLEAR and GOOD documentation (not a novel), or opinions on software. Please answer to ANYTHING, even if it's just a small nudge in the right direction.

Thank you.
_________________
I was a Gangster for Capitalism, by Major General Smedley Butler.

Server status: Currently down, being replaced with fresh install - 20% completed.
Back to top
View user's profile Send private message
dsd
Developer
Developer


Joined: 30 Mar 2003
Posts: 2162
Location: nr London

PostPosted: Sat Jun 05, 2004 7:56 am    Post subject: Re: Full Gentoo server. Reply with quote

Quote:
1. Be able to run a DHCP server for the network.

You'll also be best off with a local caching DNS server, which brings me on to recommend dnsmasq : It's a lightweight DNS/DHCP server designed for LAN-setups like this.

Quote:
I've read up on IPTABLES, but it just doesn't have the flexibility that, say, Norton Personal Firewall has.

i really don't know where you got this impression from. it would be more accurate to say that norton firewall does not have half the functionality that an iptables solution does.
this is one of the things that you do need to read up about, but there is really no other alternative (iptables/netfilter is part of the kernel, and there isnt a "replacement" to my knowledge), and there does not need to be!
perhaps if you described the rules you have set up on your firewall, someone can nudge you in the right direction iptables-wise.
_________________
http://dev.gentoo.org/~dsd
Back to top
View user's profile Send private message
ajtidball
n00b
n00b


Joined: 30 May 2004
Posts: 7

PostPosted: Sat Jun 05, 2004 10:41 am    Post subject: Reply with quote

I recommend installing (emerging) Webmin. It will provide you with a web-based configuration GUI for samba, DHCP, iptables, (shorewall too). This takes the pain out of learning command line stuff (even though most Gentoo heads swear by it)

Shorewall is a decent firewall, it's fairly easy to setup (with Webmin, or command line).
Back to top
View user's profile Send private message
HydroSan
l33t
l33t


Joined: 04 Mar 2004
Posts: 764
Location: The Kremlin (aka Canada)

PostPosted: Sat Jun 05, 2004 2:11 pm    Post subject: Reply with quote

I've heard about Webmin before. I'll try that out, thanks.
_________________
I was a Gangster for Capitalism, by Major General Smedley Butler.

Server status: Currently down, being replaced with fresh install - 20% completed.
Back to top
View user's profile Send private message
n3mo
l33t
l33t


Joined: 28 Mar 2004
Posts: 657
Location: In a Cruel World

PostPosted: Sat Jun 05, 2004 4:23 pm    Post subject: Reply with quote

In my firm we got some PII 400 with 128MB of ram and 30GB HD which provide all the things you mentioned, except amule, bittorrent ecc., plus caching nameserver, squid and freeswan, with no problems at all.:D
I used shorewall for the configuration of iptables and I think it's a quite good choise, there's a lot of docs in their site, about the security i think you like to start with gentoo-security.xml.
Back to top
View user's profile Send private message
the_sphynx
Apprentice
Apprentice


Joined: 19 May 2004
Posts: 156
Location: Thornton, CO

PostPosted: Tue Jun 08, 2004 3:11 am    Post subject: Reply with quote

I don't know if anyone has fully answered your questions so here it goes:
Code:
1. Be able to run a DHCP server for the network.

dhcpd should work just fine and is highly configurable.

Code:
2. Be able to run a SAMBA server for the network.

Samba will run perfectly fine on that box with very little or no overhead. I definitely suggest version > =3.x as that will also give you Win2k DC functionality.

Code:
3. Be able to have IP Masq.'ing going for the network like ICS in WindowsXP, with the same kind of flexibility.

IPTables is by far more flexible then ANY other firewall that runs on WIndows or most versions of *nix. I pride myself in being an iptables firewall admin using iptables+patch-o-matic on my network with no virus activity/trojans/downtime in 398 (and counting) days.

Code:
4. Be able to basically be a downloading and file hosting server for BitTorrent and aMule. (My precious, precious BeatMania IIDX videos...)

That should be simple with Apache (for use with d/l over the net) or whatever BitTorrent server you may want to use.

Code:
5. Have a firewall setup for a good enough security solution.

This goes back to number 3. Iptables will do the trick for you and once you get used to the syntax you are almost unlimited in potential.

I hope that this helps in your search for a quality server!
_________________
Folding@Home User 285941
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum