View previous topic :: View next topic |
Author |
Message |
HydroSan l33t
Joined: 04 Mar 2004 Posts: 764 Location: The Kremlin (aka Canada)
|
Posted: Sat Jun 05, 2004 5:26 am Post subject: Full Gentoo server. |
|
|
This may be a long post, and it may be a repost, but I really need some help, even after searching around.
What this box (a P-II 400MHz with 512MB of PC-133 RAM and a 40GB Hard Drive) needs to do is the following:
1. Be able to run a DHCP server for the network.
2. Be able to run a SAMBA server for the network.
3. Be able to have IP Masq.'ing going for the network like ICS in WindowsXP, with the same kind of flexibility.
4. Be able to basically be a downloading and file hosting server for BitTorrent and aMule. (My precious, precious BeatMania IIDX videos...)
5. Have a firewall setup for a good enough security solution.
I also plan on having some sort of MUD hosted for a friend in the near future.
I've read up on IPTABLES, but it just doesn't have the flexibility that, say, Norton Personal Firewall has.
So to sum up, what I NEED knowledge on is: A good DHCP server, IP Masq'ing, and some sort of Firewall that's nice and graphical. I don't have much time to learn completely new software at the command-prompt level, but would be willing to if required. I've already got a good bane on Samba (from the Gentoo documentation and other sources).
I mostly want to get ALL my boxes off of Windows. I've only got one box left, and thats my server. And the only thing thats keeping that is the nice ICS and Norton Firewall setup I've gotten used to.
Any help, either links to older topics, CLEAR and GOOD documentation (not a novel), or opinions on software. Please answer to ANYTHING, even if it's just a small nudge in the right direction.
Thank you. _________________ I was a Gangster for Capitalism, by Major General Smedley Butler.
Server status: Currently down, being replaced with fresh install - 20% completed. |
|
Back to top |
|
|
dsd Developer
Joined: 30 Mar 2003 Posts: 2162 Location: nr London
|
Posted: Sat Jun 05, 2004 7:56 am Post subject: Re: Full Gentoo server. |
|
|
Quote: | 1. Be able to run a DHCP server for the network. |
You'll also be best off with a local caching DNS server, which brings me on to recommend dnsmasq : It's a lightweight DNS/DHCP server designed for LAN-setups like this.
Quote: | I've read up on IPTABLES, but it just doesn't have the flexibility that, say, Norton Personal Firewall has. |
i really don't know where you got this impression from. it would be more accurate to say that norton firewall does not have half the functionality that an iptables solution does.
this is one of the things that you do need to read up about, but there is really no other alternative (iptables/netfilter is part of the kernel, and there isnt a "replacement" to my knowledge), and there does not need to be!
perhaps if you described the rules you have set up on your firewall, someone can nudge you in the right direction iptables-wise. _________________ http://dev.gentoo.org/~dsd |
|
Back to top |
|
|
ajtidball n00b
Joined: 30 May 2004 Posts: 7
|
Posted: Sat Jun 05, 2004 10:41 am Post subject: |
|
|
I recommend installing (emerging) Webmin. It will provide you with a web-based configuration GUI for samba, DHCP, iptables, (shorewall too). This takes the pain out of learning command line stuff (even though most Gentoo heads swear by it)
Shorewall is a decent firewall, it's fairly easy to setup (with Webmin, or command line). |
|
Back to top |
|
|
HydroSan l33t
Joined: 04 Mar 2004 Posts: 764 Location: The Kremlin (aka Canada)
|
Posted: Sat Jun 05, 2004 2:11 pm Post subject: |
|
|
I've heard about Webmin before. I'll try that out, thanks. _________________ I was a Gangster for Capitalism, by Major General Smedley Butler.
Server status: Currently down, being replaced with fresh install - 20% completed. |
|
Back to top |
|
|
n3mo l33t
Joined: 28 Mar 2004 Posts: 657 Location: In a Cruel World
|
Posted: Sat Jun 05, 2004 4:23 pm Post subject: |
|
|
In my firm we got some PII 400 with 128MB of ram and 30GB HD which provide all the things you mentioned, except amule, bittorrent ecc., plus caching nameserver, squid and freeswan, with no problems at all.
I used shorewall for the configuration of iptables and I think it's a quite good choise, there's a lot of docs in their site, about the security i think you like to start with gentoo-security.xml. |
|
Back to top |
|
|
the_sphynx Apprentice
Joined: 19 May 2004 Posts: 156 Location: Thornton, CO
|
Posted: Tue Jun 08, 2004 3:11 am Post subject: |
|
|
I don't know if anyone has fully answered your questions so here it goes:
Code: | 1. Be able to run a DHCP server for the network. |
dhcpd should work just fine and is highly configurable.
Code: | 2. Be able to run a SAMBA server for the network. |
Samba will run perfectly fine on that box with very little or no overhead. I definitely suggest version > =3.x as that will also give you Win2k DC functionality.
Code: | 3. Be able to have IP Masq.'ing going for the network like ICS in WindowsXP, with the same kind of flexibility. |
IPTables is by far more flexible then ANY other firewall that runs on WIndows or most versions of *nix. I pride myself in being an iptables firewall admin using iptables+patch-o-matic on my network with no virus activity/trojans/downtime in 398 (and counting) days.
Code: | 4. Be able to basically be a downloading and file hosting server for BitTorrent and aMule. (My precious, precious BeatMania IIDX videos...) |
That should be simple with Apache (for use with d/l over the net) or whatever BitTorrent server you may want to use.
Code: | 5. Have a firewall setup for a good enough security solution. |
This goes back to number 3. Iptables will do the trick for you and once you get used to the syntax you are almost unlimited in potential.
I hope that this helps in your search for a quality server! _________________ Folding@Home User 285941 |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|