The Daily Static
  The Daily Static
UF Archives
Register
UF Membership
Ad Free Site
Postcards
Community

Geekfinder
UFie Gear
Advertise on UF

Forum Rules
& FAQ


Username

Password


Create a New Account

 
 

Back to UserFriendly Strip Comments Index

The firewall is back running by challinor 2004-12-30 03:34:54
Thanks for all wishes of good luck. Yes I did manage to get the data of the disks. This also means I know have a backup of the "interesting" parts of the configuration. Amazing all those little "gotchas" you for get when you havent done this for over a year.

Why three disks someone asked? Well, they were small disks and I wanted the /var and /usr/src on separate disks. Also, there is a front end web server on the box. This is a route through to other services. Nothing heavy usaged.

Why not Monowall? Well, for a start this needs a Linux 2.4.22 kernel to get the ADSL card device drivers built. Secondly, my configuration requires that I map my IP address range of 6 IP's to different boxes. I want to do this dynamically and change the config. IPTables is great for this.

Finally, I have scripts that block MSN, Yahoo, Hotmail, etc at 23:00 until 07:00. This means that Errant Daughter (ED to her friends) is not tempted to stay online all night and then complain she is too tired for college!

Major problems found during rebuild were: a) Make sure you disabled as much of the unneeded stuff in the Linux Kernel as possible and ensure you have a clean build. b) Make sure that the ADSL card doesn't share IRQ's. Dont know why, but the driver doesnt like sharing IRQ with anything. c) Make sure you get all the service parameters correct for the ISP connection!

[ Reply ]

 

[Todays Cartoon Discussion] [News Index]

Come get yer ARS (Account Registration System) Source Code here!
All images, characters, content and text are copyrighted and trademarks of J.D. Frazer except where other ownership applies. Don't do bad things, we have lawyers.
UserFriendly.Org and its operators are not liable for comments or content posted by its visitors, and will cheerfully assist the lawful authorities in hunting down script-kiddies, spammers and other net scum. And if you're really bad, we'll call your mom. (We're not kidding, we've done it before.)