Network Configuration

Define your network architecture below. These values will be written in the file ´etc/net.cfg´. You can use the defined variables in all other configuration masks.

Use  as IP-Filter command

Network definition
Domain:  ($DOMAIN)
Netmask:  ($NETMASK)
IP Masquerading:   Internal Network ($masquerade_internal)   masq. $internal -> $perimeter also ($masq_int_peri)
(for all services!)  Perimeter Network ($masquerade_perimeter)

Use the variable '$internal' to describe your internal network in other masks - $internal=$DOMAIN/$NETMASK (is defined in Aliases).
Normally, IP-Masquerading is only needed for connections to the Internet ($any). Thus IP-Masquerading takes not place for connections from internal to perimeter network. You can enable this by checking the '$masquerade_int_peri' variable above. IP-Masquerading is actually not available for "IP-Filter".
 

Firewall devices and perimeter net

You have to define your firewall and all network interfaces. If you don´t have an internal and/or perimeter network, leave the fields blank.
Hostname: The name of the firewall ($FW).
External network device: The device which connects the internet - e.g. ppp0 ($OUT_DEV0).
Internal network device: The device which connects the internal network - e.g. eth0 ($IN_DEV0).
Perimeter network device:  The device which connects the perimeter network - e.g. eth1 ($IN_DEV1).
Perimeter network hosts: ($PERIMETER)
List all hostnames (also aliases!) which are on the perimeter network (we use these names to set the correct network interface).
 

Host definitions

These are the most important services for a network. Define which host(s) serves the named service.
Use these values in the other configuration masks.
 
Services: 
DNS:
SMTP:
POP3:
FTP:
HTTP:
NNTP:
 
  Specials: 
Gateway: Do you really need a login gateway ($GW)?
Administration: These hosts can connect the firewall for administration ($ADMIN).
Accounting: Start accounting for these hosts ($ACCOUNT).
Visible hosts: Hosts visible from the internet - e.g. ping, telnet ($VISIBLE).
 


(c) 1998 J. Hellmerichs-Friedrich