From: Gregory Seidman on
I have a mini case with a VIA motherboard and CPU. It has an on-board
ethernet port. I'd like to use it as a Linux firewall/NAT router to replace
the (wired only) LinkSys I have now. It only has one PCI slot, but I want
to be able to provide both wired and wireless LAN access. I'm looking for
both hardware suggestions (i.e. a PCI card with both wired and wireless
ethernet that is supported by the kernel in stable) and configuration help.

My requirements are:

1) Wireless is an independent subnet from the wired, and is firewalled from
the wired LAN in the same way as the outside world.

2) Several open ports forwarded to not necessarily the same port on a
machine on the wired LAN (e.g. ports 80, 22, 443).

3) WPA encryption on wireless.

4) UPNP support (wired and wireless).

5) NAT/DHCP support (wired and wireless).

6) Prioritize all wired traffic over wireless.

7) Prioritize all SIP (VoIP) traffic (via wired) over everything else.

Basically, I want my VoIP line to get the best bandwidth available on the
external connection, wired to get priority over wireless, and wireless to
be firewalled from the external interface (no forwarded ports at all,
except UPNP), but wired firewalled from both wireless and external
interfaces (with some forwarded ports). I don't feel the need to run my own
DNS, though, just routing.

--Greg


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: oneman on

On 28-jun-2008, at 18:30, Gregory Seidman wrote:

> I have a mini case with a VIA motherboard and CPU. It has an on-board
> ethernet port. I'd like to use it as a Linux firewall/NAT router to
> replace
> the (wired only) LinkSys I have now. It only has one PCI slot, but
> I want
> to be able to provide both wired and wireless LAN access. I'm
> looking for
> both hardware suggestions (i.e. a PCI card with both wired and
> wireless
> ethernet that is supported by the kernel in stable) and
> configuration help.
>
>
Maybe not the answer that you were looking for. But seeing what your
requirements are, I'd simply add a two or four port ethernet card to
the case and plug a wireless bridge into one of the ports. This would
be a hassle free setup and give you all the options you need without
having to hunt down that probably rare or non existent card with both
wireless and wired. This would also give you the future proof
posibility to add another wireless bridge when a new and better
standard is hitting the market. (I love to have both 802.11b and
802.11n bridges on my network, so I can have the 802.11n bridge
running at its fastest setting).






Groet,


Peter Teunissen


---
mrwhite:~ oneman$ man woman
No manual entry for woman


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Nick Lidakis on
oneman wrote:
>
> On 28-jun-2008, at 18:30, Gregory Seidman wrote:
>
>> I have a mini case with a VIA motherboard and CPU. It has an on-board
>> ethernet port. I'd like to use it as a Linux firewall/NAT router to
>> replace
>> the (wired only) LinkSys I have now. It only has one PCI slot, but I want
>> to be able to provide both wired and wireless LAN access. I'm looking for
>> both hardware suggestions (i.e. a PCI card with both wired and wireless
>> ethernet that is supported by the kernel in stable) and configuration
>> help.
>>
>>
> Maybe not the answer that you were looking for. But seeing what your
> requirements are, I'd simply add a two or four port ethernet card to the
> case and plug a wireless bridge into one of the ports. This would be a
> hassle free setup and give you all the options you need without having
> to hunt down that probably rare or non existent card with both wireless
> and wired. This would also give you the future proof posibility to add
> another wireless bridge when a new and better standard is hitting the
> market. (I love to have both 802.11b and 802.11n bridges on my network,
> so I can have the 802.11n bridge running at its fastest setting).
>

I had done something similar with my monowall firewall running on a PC
Engines WRAP board. Adding a mini-PCI wireless card, with its associated
cables and antennas, would have been a big expense. It was much cheaper
to pick up a used Linksys WRT54G ($20 from Craigslist) and use it as a
dedicated wireless AP. You can also use the the remaining 3 ethernet
ports as you would a regular switch for the wired devices on your LAN.


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Gregory Seidman on
On Sat, Jun 28, 2008 at 10:04:52PM +0200, oneman wrote:
> On 28-jun-2008, at 18:30, Gregory Seidman wrote:
>
>> I have a mini case with a VIA motherboard and CPU. It has an on-board
>> ethernet port. I'd like to use it as a Linux firewall/NAT router to
>> replace the (wired only) LinkSys I have now. It only has one PCI slot,
>> but I want to be able to provide both wired and wireless LAN access. I'm
>> looking for both hardware suggestions (i.e. a PCI card with both wired
>> and wireless ethernet that is supported by the kernel in stable) and
>> configuration help.
>>
> Maybe not the answer that you were looking for. But seeing what your
> requirements are, I'd simply add a two or four port ethernet card to the
> case and plug a wireless bridge into one of the ports. This would be a
> hassle free setup and give you all the options you need without having to
> hunt down that probably rare or non existent card with both wireless and
> wired. This would also give you the future proof posibility to add
> another wireless bridge when a new and better standard is hitting the
> market. (I love to have both 802.11b and 802.11n bridges on my network,
> so I can have the 802.11n bridge running at its fastest setting).

Good advice. Suggestions on make/model for a multiport card supported by
the stable distribution's kernel?

> Groet,
> Peter Teunissen
--Greg


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Ron Johnson on
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/28/08 22:05, Gregory Seidman wrote:
> On Sat, Jun 28, 2008 at 10:04:52PM +0200, oneman wrote:
>> On 28-jun-2008, at 18:30, Gregory Seidman wrote:
>>
>>> I have a mini case with a VIA motherboard and CPU. It has an on-board
>>> ethernet port. I'd like to use it as a Linux firewall/NAT router to
>>> replace the (wired only) LinkSys I have now. It only has one PCI slot,
>>> but I want to be able to provide both wired and wireless LAN access. I'm
>>> looking for both hardware suggestions (i.e. a PCI card with both wired
>>> and wireless ethernet that is supported by the kernel in stable) and
>>> configuration help.

Adding all this extra equipment is going to cost you *much* more
than buying a Linksys WRT56GL and reflashing it with the Tomato or
DD-WRT firmware.

>> Maybe not the answer that you were looking for. But seeing what your
>> requirements are, I'd simply add a two or four port ethernet card to the
>> case and plug a wireless bridge into one of the ports. This would be a
>> hassle free setup and give you all the options you need without having to
>> hunt down that probably rare or non existent card with both wireless and
>> wired. This would also give you the future proof posibility to add
>> another wireless bridge when a new and better standard is hitting the
>> market. (I love to have both 802.11b and 802.11n bridges on my network,
>> so I can have the 802.11n bridge running at its fastest setting).
>
> Good advice. Suggestions on make/model for a multiport card supported by
> the stable distribution's kernel?

Intel cards have been well-supported for ages.

- --
Ron Johnson, Jr.
Jefferson LA USA

"Kittens give Morbo gas. In lighter news, the city of New New
York is doomed."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkhnBL4ACgkQS9HxQb37XmdUTQCffJfJqGopd8pNJx9oO5lYXS20
pIgAnRa6/hD8upgVpWHP4jZ+HLvWbUMl
=7rWQ
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org