[TriLUG] Re: using a Linux box as a pass-through filter

[Brian Henning]

This topic was addressed on the list a few months ago, talking about a 
transparent drop-in linux-based firewall..  It wasn't something that I was 
concerned with at the time so I don't remember a great deal about it, but 
you might want to check the TriLUG archive.

~B

----- Original Message ----- 
From: "Lance A. Brown" <lance at bearcircle.net>
To: "Triangle Linux Users Group discussion list" <trilug at trilug.org>
Sent: Monday, December 20, 2004 9:07 AM
Subject: [TriLUG] Re: using a Linux box as a pass-through filter


> Yep.  This can be done.  Someone where I work has a linux box set up as
> a bridge and is running firewall rules on it to protect a Beowolf
> cluster.  The system is normally invisible to the network.
>
> --[Lance]
>
> Dan Monjar wrote:
>> An idea I had late last night while I listened to the wind howl... would
>> it be possible to setup a Linux box with two nics and use various
>> firewall rules to filter traffic and ports... the possible gotcha is
>> that I don't want either nic to have an IP address.  I want to take
>> traffic in on one port, analyze and drop unwanted packets and then push
>> the acceptable traffic out through the other nic.
>>
>> I want an in-line filter...
>>
>> I wish everyone on the list a Happy and Safe Holiday season.
>
> -- 
> Carolina Spirit Quest  http://www.carolinaspiritquest.org/
> Celebrate The Circle   http://www.celebratethecircle.org/
> My LiveJournal  http://www.livejournal.com/users/labrown/
> GPG Fingerprint: 409B A409 A38D 92BF 15D9 6EEE 9A82 F2AC 69AC 07B9
> CACert.org Assurer
> -- 
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ  : http://trilug.org/faq/
> TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
> TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc
>