Friday, August 12, 2005

Creating a Simple Router and Firewall

Problem Statement :
I have two gateways doing exactly the same thing - any one of them can be termed as default gateway, But now you want to split the traffic and do many more smarter things on the traffic! you want to control exactly what kind of traffic goes through which Gateway?

Solution:
Install Linux! I do not have special atttraction towards Linux, but Linux networking tool excel in many areas and much better than what plain vanilla windows installation give you. So thats why linux. Actually - I can assign hosts in dhcp for static routes, implement rip or igrp in my firewalls - but all that costs alot of stupid network traffic. Does not make sense to me. You are welcome to accept this solution - or - you can put your comments right here and I will get enlightened with your smart solution. Any way, lets continue with our problem.

so what I did, I put another Linux Box, which decides where to send packet, logs the packet, creates the graph of which protocol being used most, how much vpn traffic, how much non - vpn traffic and its all fast, because my firewall runs on PII cpu and My Linux box runs on PIII with minimal services. And gives me alot of flexibilities.

how to do this?

  1. install 2 network interface cards
  2. learn how to use "ip" command
  3. add rules and tables on ip command
  4. tell ip command to send which traffic where based on packet source, packet destination and user id
  5. and even you can control that which mac address can get how much bandwidth(i have not done yet, but you should go and read LARTC - Linux Advanced Routing and Traffic Control)
  6. install transparent proxy
  7. install iptraf + rrd tool
and you are there with words most advanced router sitting there, and if you are really a cisco router geek then you might want to get zebra and start using that!

10 comments:

Anonymous said...

Damn the router and fiewall and can we have some more entertaining stuff like mindless creativity?

Anonymous said...

I came here hoping to find something entertaining. If these kind of posts continue, I'll stop visiting.

Anonymous said...

Gateway is spelt wrong in the diagram. Please correct.

Anonymous said...

let there be one less visitor, I like some tech stuff too. So boy! nice mix'n'match. Keep writing....

Anonymous said...

Screw the tech stuff and stuff the techies. Give me mindless creativity anytime [-o<

Anonymous said...

screw you dude, who are you decided what should be on this blog. Let him decide and stuff you...

Anonymous said...

if(beautiful babe) {
screwMe();
} else {
buzzOff();
}

And who are you to decide to tell him to decide what he should decide to do. So stuff yourself.

Ajey said...

guys please!

Anonymous said...

"screw you dude, who are you decided what should be on this blog. Let him decide and stuff you..."

Sorry to be creative, but I think it should be "who are you TO DECIDE what should be on this blog"

Ajey said...

can we talk about the post and not about "stuffing and screwing" this is so funny