Router + firewall + NIDS questions

[beesond001 at hawaii.rr.com]

Joe,
	I know only that wireless is possible and that 802.11 has been cracked.  
I also know I can't drill any holes in the house I am renting to run cat 
5 cable :-(   
	I wish to make the wireless pretty secure, but I also live in the 
outskirts and so I don't think the threat to a wireless LAN is as high as 
it could be if I were downtown in a crowded "network" space.  Further, I 
am not against limiting connections to and from the wireless clients to 
only certain times of day via the firewall rules and crontab entry if I 
can figure out a way to hack that in also.  The intent here is to provide 
access to the internet for my kids so they can use it for their homework. 
 I can easily close that down when they are "out at school etc."   In 
that respect, it may be easier to have a separate ethernet card for the 
wireless end.  I can also turn off the router end of the wireless modem 
when it is not being used as it will be right next to my box.   That 
said, MAC address is probably the most secure way to go if I can figure 
out how to do that.     
	Any other suggestions would be greatly appreciated.  And yes, this is a 
learn as I do it project ;-)
Thanks in advance,
Ben 
	

Original Message dated 8/25/01, 8:02:13 PM
Author: "Joe Paleafei" <mantaray at linuxfreemail.com>
Re: [luau] Re: Router + firewall + NIDS questions:


one quick question... what method of connection are you using for the 
wireless machines... restriction to mac address or going with ip?  and 
what sort of security are you looking at having on this wireless network, 
because as you may know wireless is far from secure...
 
 
----- Original Message ----- 
From: beesond001 at hawaii.rr.com 
To: Linux & Unix Advocates & Users 
Sent: Saturday, August 25, 2001 7:17 PM
Subject: [luau] Router + firewall + NIDS questions

Aloha all,
I would like some advice on how to do something. I would like to build a 
router + firewall + NIDS from scratch to use for my home LAN. I was 
thinking of building a box to act as a router and firewall for 1 Sparc, 1 
VALinux box, one Mac, and one Windoze box. I envision a Linux box for 
this that should boot headless. I also want this router + firewall box to 
share one internet connection with all the others. BTW, the Mac and 
Windoze boxes will need a wireless connection (wireless 802.11???). I was 
also thinking of running Snort on the internal side of the router + 
firewall to monitor what gets past the firewall. Because of all this, I 
don't think that the linux router project will work, but the idea is 
mostly the same.
What I would like to know is what does the community of experts think is:
--- You are currently subscribed to luau as: mantaray at linuxfreemail.com 
To unsubscribe send a blank email to $subst('Email.Unsub') -- 
a fast enough CPU for such a task,
-- how much hard drive should I buy, 
-- and should I run a hub behind the firewall, or should I just throw in 
some extra NICs? 
Any ideas would be greatly appreciated. 

Thanks in advance for your help,
Ben 

---
You are currently subscribed to luau as: beesond001 at hawaii.rr.com
To unsubscribe send a blank email to $subst('Email.Unsub') 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freesoftwarehawaii.org/pipermail/luau-freesoftwarehawaii.org/attachments/20010826/733e0248/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/rtf
Size: 9684 bytes
Desc: filename="text1.rtf"
URL: <http://lists.freesoftwarehawaii.org/pipermail/luau-freesoftwarehawaii.org/attachments/20010826/733e0248/attachment-0001.rtf>