Linux Firewall

[Kronos]

Hi,

I want to secure my internal network using a firewall/proxy. I was wondering if Squid could also act as a firewall, or would anyone have a recommendation for me? Thanks!

[dingman]

Squid is a web proxy server, which is a bit different from a firewall, though it is quite possible to run them on the same machine. If you want a firewall as well, you should look into the 'iptables' functionality of the Linux kernel. It's quite capable, and there are a number of front-ends that make configuring it easier. I don't have one of those to reccomend, because I didn't like any of the ones I tried, so I set mine up with cryptic command-line tools.

[Kronos]

Thanks for the tip. I was wondering if you knew of any good documentation to setting up iptables and squid, because most of what I've found is kind of cryptic. And also, what would you think better? Ipchains or iptables? which one is newer?

[bakedjake]

Check out [shorewall.sourceforge.net...]

It's a good package using iptables (which is the newer technology), and has a nice front end, IMHO. It's also got IPSEC, and PPTP terminiation support, in case you want to create a VPN.