Smoothwall Express 2.0 Firewall for Beginners – Part One
Hi AO,
I will take a crack at writing a tutorial for this site. I have never done one before - this is my first. Please be kind. Please feel free to post or PM me your thoughts or suggestions for improvement and I will try my best to implement them into Parts 2 and 3 - if there is community interest.
RY
Smoothwall Express 2.0 Firewall for Beginners – Part One
Q: What is Smoothwall?
Smoothwall is a firewall based on GNU/Linux. For more information, please visit: http://www.smoothwall.org/. This tutorial is written for the beginner who has not setup a firewall product before and does not have much hands on experience with Linux. This tutorial covers basic setup of Smoothwall. If I get positive feedback and these seems to be an interest in more, I will write up “Part Two – Smoothwall Configuration & Patching for Beginners” and “Part Three – Smoothwall Advanced Setup”.
For this tutorial, the test network setup is as follows:
Internal Interface/Network card [GREEN] [10.0.0.0/24] ---> Smoothwall Firewall ---> External Interface/Network card [RED] [20.0.0.0/24] ---> World Wide Web/Internet
What you will need:
- A computer with a BIOS that can be set to boot from CD-ROM. Most modern computers have it.
- A CD burner to burn the ISO image.
- You will also need 2 network cards for GREEN/RED mode setup. For this tutorial I will only cover GREEN/RED mode. You can also setup with 3 network cards, GREEN/ORANGE/RED mode – the ORANGE interface being your DMZ. You may want to make note and write down the MAC addresses of the cards at this point. It will help you identify which network card is which later on, especially if you have network cards made by the same manufacturer.
Get Smoothwall:
Goto http://www.smoothwall.org/get/ and download the ISO image. Burn the image onto a CD Rom. You have a choice between an ISO with manuals (45.46mb) and an ISO without manuals (33.78mb). Get the manuals, you will need them.
1.Go into your computer BIOS settings and set the computer to boot from:
CD-ROM First
IDE Hard drive Second.
While you are there, you might as well disable audio and power management. you won't need them.
2.Insert Smoothwall CD into CD-ROM and start up the machine. The machine will boot into Smoothwall.
3.At the boot screen, just press ENTER to continue. The first screen you get will be the Smoothwall welcome screen. Press ENTER to continue.
4.Installation Media
TAB to CD-ROM, TAB to OK and press ENTER
5.Hard Drive Preparation.
NOTE: SMOOTHWALL WILL ERASE ALL THE DATA ON THE HARD DRIVE! Make sure you don't have anything important on it. Press ENTER to continue.
6.Set up GREEN Network Interface.
The Green interface is your “internal” network. The one that you want to protect from the outside world.
Press ENTER to “Probe” (look for a network card).
Once it finds the network card, TAB to OK and press ENTER to select it.
Make note of the MAC address, this is an alpha numeric number and will look something like this “00:XX:XX:XX:XX:XX”, the “X's” will be either numbers of letters.
7.Assign Internal IP address.
For this tutorial we will use 10.0.0.0/24. You can use any private IP address allocation.
TAB to IP Address, type 10.0.0.1
TAB to Subnet Mask, leave it at 255.255.255.0
TAB to OK and press ENTER
8.Install Complete.
Remove CD.
The next screen is restore prompt. Just press ENTER to continue. We have nothing to restore.
9.TAB to select your keyboard language. TAB to OK to continue.
10.Machine Host name.
For this tutorial we will leave it at the default setting which is host name “smoothwall”. But you should change that to something less descriptive later on. NEVER USE OS NAME FOR SERVER HOST NAME!
TAB to OK and press ENTER. TAB to OK and press ENTER again.
11.TAB to DISABLE ISDN and press ENTER.
12.TAB to DISABLE ADSL and press ENTER.
13.Network Configuration Menu. Select your GREEN network interface.
Select “Network Configuration Type” press ENTER.
Select GREEN / RED press ENTER
Select “Driver and cards assignments” press ENTER.
Press ENTER to PROBE
Select 2nd Network Card / RED press ENTER. THIS IS YOUR EXTERNAL NETWORK CARD. THIS IS WHERE YOU WILL PLUG IN YOUR Internet connection.
Select “Address Settings” press ENTER.
Scroll Down to RED interface press ENTER.|
Select DHCP if you ISP assigned you a IP or static if your IP doesn't change. You will need to type in the settings. For this tutorial we will use 20.0.0.0/24. Our assigned IP is 20.0.0.20. Type that in. TAB to DONE press ENTER
Scroll down to “DNS and Gateway settings”, TAB to OK press ENTER. For this tutorial the gateway is 20.0.0.1 and DNS servers are 20.0.0.2 and 20.0.0.3 (You will need to get that info from your ISP for your setup.)
type 20.0.0.2 and 20.0.0.3 for primary & secondary DNS
type 20.0.0.1 for gateway
TAB to OK press ENTER
TAB to DONE press ENTER
14.Enable DHCP
We will enable DHCP address assignment for our internal network.
We will leave it at default settings for this tutorial. Starting at 10.0.0.100 to 10.0.0.200.
TAB to OK press ENTER
15.Assign passwords
Type in the password you want to use for the “admin” account.
For this tutorial we will use “MyPassword”
Type in the password you want to use for the “root” account.
For this tutorial we will use “MyPassword”
Type in the password you want to use for the “setup” account.
For this tutorial we will use “MyPassword”
NEVER USE THESE PASSWORD! AND NEVER MAKE THEM ALL THE SAME !
ALWAYS USE STRONG PASSWORD FOR SERVERS AND CHANGE THEM REGULARLY – AT LEAST EVERY 3 MONTHS!
16.Setup Complete
Press ENTER to reboot the machine
You have just setup your first firewall! Congratulation's! :-)
If you want to see what it looks like, press ENTER at the Smoothwall boot screen.
At the login prompt login as “root”.
To login:
at the “smoothwall login:” type “root” and press ENTER
at the “password:” type “MyPassword” and press ENTER
If you are successful, you will see “[root@smoothwall root]#” on your screen.
