Do we have anybody that is familiar with the SmoothWall router/firewall package?

[John Collier]

I have an old P133Mz box with 32MG RAM that I was about to throw in the trash and then someone pointed me toward this software. The problem is that I have never been through any kind of Linux install before and the documentation that comes with it seems to assume that anybody reading it should have some basic background.

My little machine that I want to load this on doesn???t have a CD ROM in it and I don???t happen to have a spare one that I can just throw into it at the moment. This means that I will have to use the boot disks (which a friend of mine was gracious enough to make for me) and try to do an FTP install. That seems fair enough since they seem to provide a link in their FAQs to an FTP server that is available.

My next question is regarding the actual HCL for this particular version 1.0 of the program. I have heard that it exists on the SmoothWall web site, but can???t seem to locate it. Could anybody point me to it? What I am trying to determine is if the two network cards I have will be supported by the current release or if I will have to do something different. The first card that I want to use in the ???Red??? capacity is an old ISA 10 base card so I???m not so worried about it. The other one is relatively new. It???s a PCI LAN Adapter from GIGAFAST (an EE100-AXP to be more precise).

I also understand that I will have to assign IRQs to each of these devices, but I can???t locate any jumpers on either of the NICs to do this and the BIOS didn???t offer too much help in this area either.

One last question comes to mind. I already have a Linksys router in place. If you were in my place, would you put the SmoothWall box in place of the existing router or simply put it between the existing router and the switch?

Bottom line would be that I am obviously very new to any type of Linux install and I would appreciate all of the HELP!!! that I can get???

P.S.
I do award points for answers to my posts, but I will hold off on assigning them until the issue is resolved so I can be fair to all who attempt to answer. I want the correct person to get their bunny ;-)

[Steven E. Protter]

Hey John,

Linux is not nearly as good as Windows at network card support. To boot and do the install off ftp requires a NIC card/driver thats known to the Linux release you are using.

Red Hat has the best hardware support, in my opinion, and 7.3 has a router/firewall configuration out of the box.

To pull of the ftp install, a known NIC driver is a must.

As to the router question: The linksys router will be needed to do the ftp install. When you suceed in creating a router with TWO NIC cards, you can use it to replace the linksys. Card 1 is assigned the address by your ISP, card 2 is the one for your internal network.

Hope this is a start if not a solution.

SEP

[James Wilson_5]

This is actually one of the few cards at this point in time that state in its documentation that it has Linux support. See http://www.gigafast.com/products/Adapters/EE100-AXP/ee100-axp.pdf.

This probably means it uses a common chip that has a driver in the kernel. Having said that it is probably a good idea to use the latest of whatever distro you are using/planning to use. These days most distro's have firewall software setup by default and some have nice tools to configure your firewall. (RH, Mandrake, Suse)

[James Wilson_5]

Just reread your post :)
You want to set this box up as a dedicated firewall and want to use smoothwal.

Just visited the smoothwall site and they are still using the 2.2 kernel. I am not sure it will support the new nic as I don't know what chipset it has.

Although the package seem to have recent activity the docs are outdated.
I was going to suggest that you use a floppy based firewall system, but that implies you make your own because of the nic's you have.

IRQ's: You don't have to bother on the PCI card and if the ISA card does not have links it is a plug and pray card - Linux can deal with it OK most of the time.

[John Collier]

SEP,

Your hopes have been realized. This is a start. Unfortunately it is not a solution.

I guess either my original message was too long (I never know how much detail to put into the first message) or not very clear. I already have the two NIC cards for the donor machine and what I am trying to figure out now is the next logical step in this process.

The software I am looking at is a self-contained package that is stripped down to the bare necessities for the actual OS and then has the additional firewall code packaged with it. I wasn???t really looking for a replacement or alternate OS.

I was considering the idea of keeping the Linksys router in place at this time as more of a two-tier intrusion deterrent than anything else. The ???Red??? NIC is set up by default in this package to receive its address from a DHCP server. Since the existing router does NAT translation, I figured I could use the existing router to serve an address to the system I am building until I get it all straightened out. Then I could either leave it that way or remove the Linksys all together.

Just my brain-drizzle on the subject???


James,

One of the reasons that I purchased the PCI card was that it specifically states that it is Linux compatible. I didn???t see any other card in the store that made that claim. Would it help if I located the chip information from the card and posted it here? I just don???t want to keep a card that will be of no service to me in the long run???

I had the same opinion of the docs for the software that you did. By the way, assuming that I can locate a CDROM for this system, how do I make use of the ISO that I downloaded? I may not be the brightest crayon in the box, but I can tell that even *NIX won???t recognize that file extension if I just burn it to CD the way that it is.

IRQ???s: The docs for this package, outdated or not, specifically state that I have to manually set the IRQ???s for the NICs. Are you telling me now that I can leave it all alone and the software should be able to figure it out? I thought the plug and pray thing was a M$ Windoze thing only.

That would be great, but I have to admit that I???m sceptacle???

[John Collier]

Any more input, or have I stumped the Linux gurus?

[John Collier]

Ping!

[Denis Goffinet]

ISO files are ISO9660 images of all the bits present on the cd.

As ISO files are standart, any CD writing software that support Image Burning ( Nero under windows for example) support that kind of file.

There should exist the same kind of software under *NIx but I didn't burn once a cd under linux so I can't help you much.

I used Smoothwall 1 year ago and the CD was bootable, and Installation was very easy and intuitive.

[Denis Goffinet]

While I was driving my mouse on the web, I found this related to ISO burning, i hope it could help you a little bit:

[quote]
The command to burn a CD out of the ISO under Linux is:

cdrecord -eject speed=16 dev=0,0,0 KNOPPIX_V3.2-2003-04-15-EN.iso
Where cdrecord is the command, -eject ejects the CD once the recording is complete, speed=16 is the speed at which to burn the CD, dev=0,0,0 is the device ID and KNOPPIX_V3.2-2003-04-15-EN.iso is the name of the ISO image. If you don't know your CD device ID, the command cdrecord -scanbus will present a list of available devices. CD burning applications on Windows, such as Ahead Software's Nero Burning ROM , Alcohol Software's Alcohol 120% , and Roxio's Easy CD Creator , also allow you to create a CD out of an ISO image
[/quote]

Source: http://newsforge.com

[Steven E. Protter]

John, I can send you a cdrom among the bunch sitting in my basement that will probably work for that server. Hardly worth the shipping expense though, since you can get them at Best Buy for $29 or less.

So you've got two NIC cards and a network boot disk. Assuming you've got the band width, your done.

Here is how I approach an ftp installation.

First I go to http://www.redhat.com/download/mirror.html

I pick out a site that seems fast, for me that's usually the University of Indiana.

I do an nslookup for the ftp server and get the IP address, then I click through to get the subdirectory of the network image.

Boot off the diskette, which must have been made with the netimage, not the regular boot image. Hit enter after the mini kernel comes up, put in the IP address and the subdirectory, the rest of the information is pretty logical and intuitive.

Let the Linksys router assign the temporary IP address with DHCP. After you find an image, you can pick the router configuration and you are on your way to building a great router.

SEP