To all novices and experts alike:Smoothwall ROCKS!!!!

[Goosemaster]

I was rechecking their page(which i haven't checked in about a year) and was VERY impressed with what i found!!!!!

The Firewall OS actually has Dynamic DNS service, NAT(Network address Translation), SSH over Jave web-interface, and a host of other fatures.


Here is my question.

I want to have 2 XP clients and a linux or Win2kADvServer server running, but am a little confused on how I should proceed. I am hosting a page so I want security, but don't want to be redundant.

For the record, I have an SMC barricade router that was going to be behind the firewall and take care of the DHCP server role and NAT, plus provide its built in swtch for the clients and the server.

should I even bother using its DHCP and NAT...?

would this be better...

Firewall(Firewall, Dynamic DNS)
I
I
I
SMC Barricade Router(NAT, DHCP server) _____________________
I I I
I I I
I I I
I I I
(XP Client) (XP client) (Linux or Win2kAdvServer Webserver)





I'm currently messing with Visio to make a nice pic, but I sincerely felt that this was enough;for now.

 

[ttn1]

The main reason I like having a smoothwall, LRP, FREESCO machine is the flexibility. They almost always allow more configuration
features than the little $100-$200 routers. I run LRP at home and Smoothwall at work. I must say that Smoothwall's GUI is
very nice. It was also very easy to install.
For most people a little router will be fine, but for people who want maximum control a *nix based router is the way to go. I
guess I'm just a control freak.

 

[Goosemaster]

So is my config alright? I wawnt to have NAT and a DHCP server o na seperate machine than the fileserver/WEbserver, but am confounding on whether or not I should let the firewall be a firewall or a NAT as well....thanks...


By the way, how is freesco in compasion..they are both free anyways so which is better...so far my money is on Smoothwall

 

[n0cmonkey]

NAT should be done on the machine connected to the internet.

 

[lowtech1]

NAT can be done on any level, but the better way is to have the second device act as a switch/hub & the first device that conectec to the internet act as the NAT box & DHCP server.

Smoothwall is a very firewall, it is much nicer than some comercial firewalls that I have experience with and that include some from CheckPoint, CISCO Pix & Novell BorderManager.

A nice feature that it has is the IDS that uses Tcpdump & Snort.