suggestions for small home network

Hello Everyone
Here I am, finally done with setting up a small home network. I guess it s time for me now to finally experiment with my passion (thats supposed to be network security). Let me explain my network setup first.

1) I have a Celeron 1.7 box with a cable connection(though only 64 Kbps :), I am happy with it). The primary OS at this machine is Windows XP Professional. This is a dual homed machine. One network card is attatched to the cable modem and the other network card to an 8 port d-link switch.
2) An 8 port 10/100 Mbps D-link switch(only 2 network sickets occupied, both by UTP CAT 5 cables)
3) A dual processor xeon machine( two processor Pentium -II 450 Mhz each),256 MB RAM I have dual booted it with Windows XP professional and Red Hat 8.0 distro(it installed the SMP kernel version too....wowwwww..and it flows so smoothly like a river)

This was my network setup. Though I am planning t oge thold of a Pentium - 1 or even a 80 386 machine for making it a router or a gateway and a firewall. I have read some real good How-To's for small Linux and MU Linux. Cyotye is cool too. And I am dying to get hold of an old dying machine, so that I could get my hands dirty with these OS's as well. Can anyone refer me to some website, frm where i can get an old machine by just paying for the postage expenses.

Okie, now any suggestions from the GURUS, that from where should I start on network security. I know there are whole loads of some already posted questions, but i am still asking for a better advice (since the whole network setup , has been explained) . What I am thinking of is to start off a basic authentication stuff. I am thinking that is there a way that this XP machine (the internet gateway) can be authenticated through the other Red Hat machine? Is there a possible way to do this??
Furthermore, any suggestions/advices would be helpful which could add up to my learning.
I am planning to shift it to some BSD versions as well, until i get comfortable with this red hat machine.

Thank you for reading all the stuff
Ommy

Ommy for your firewall / gateway on a linux distro, you can easily run such distro's from one single 3"5 inch diskette. Google for "router on a floppy" or similar.
About authentication, running such from a BSD machine will definitly bring you a lot of knowledge about *nix and networking.

ummm...I would like to add something further...can anyone recommend me that how can i see the traffic passing through my gateway(that is dual homed), i know by means of a sniffer or by putting the network card in promocious mode. Can someone elaborate this further. This would be a real intresting experiment. How could i put the network card in promocious mode?? how can i sniff the the traffic passing through my gateway?
Thank you
I hope no one is thinking that this is a social engineering trick..
any further informatiion to ensure you people that this is my own home network can be provided, if required.
Thank you

A simple way to analyse your traffic is to run ethereal or tcpdump on one of your network nodes.

For the firewall / bridge, this probably helps? http://www.linux.com/howtos/Bridge+F...DSL.shtml#toc4

hey victor kaum ...you are quick..let me gooogle these terms..
besides this is my 100th post...
clap clap

for your router machine, if you can get ahold of a cd drive, you might want to try out IPCop . I have been playing around with it and it can do everything you want, but you will have to learn how to configure and run SNORT (an IDS, the best one out IMO).

Personally I would use a basic Linksys Router...
Never had a problem and now under $50
and using NAT, security is usually not a problem.

Try Smoothwall..

www.smoothwall.org

It's free, can run on most garbage hardware with 2 network interfaces (dialup, ethernet, or whatever), and is only ~ 50 meg to download in ISO format.

It has a basic firewall and IDS provision with a few other nice features thrown in.

Quote:

---

Originally posted here by Highlander
Personally I would use a basic Linksys Router...
Never had a problem and now under $50
and using NAT, security is usually not a problem.

---

Thing is, you can usually find an old PI or PII for free, and pay 10 bucks for used network card, IPCop is free, smoothwall is free, and its an AMAZING learning experience. Learning how to configure snort properly only through CLI teaches you a ton about linux and about how to run things from a command line. You don't learn crap from setting up a linksys router. My mother can do that.

ss2chef, Does smoothwall use Snort? Just wondering, I have never used it and I am thinking about giving it a try for the heck of it.

Quote:

---

Originally posted here by The Grunt
ss2chef, Does smoothwall use Snort? Just wondering, I have never used it and I am thinking about giving it a try for the heck of it.

---

SNORT is part of the install with a lite configuration to begin with.
You will enjoy working with it.

hmmm... i ve got a dual processor xeon machine...was just experimenting with it. SCSI cdrom is a hinderance in the way o f alots of experiment. I tried to install source mage. But it couldnt find the drivers for SCSI CD rom. Mandrake and Knoppix(Debian) also gets stuck at uncompressing linux kernel. Though I installed Windows XP pro and Red Hat(it installed the SMP kernel too...wowwww). Plus can anyone tell how can u change the host name in Red Hat 8.0 on permanent basis.

Though thank you The Grunt, ss2chef and VictorKaum. I am already looking at smoothwall and SNORT. I will be implementing it as soon as I get a Pentium-1 machine. Does anyone know from where can I get an OLD PENTIUM box by just paying postage expenses? Are there any users on AO , intrested in donating me any machine :) ...or have anyone else heard of some online donation or stuff...
That would be a real help
i really appreciate everyone's intrest in this thread...
thanx

Run a classified ad in your local paper saying you will take old computers off peoples hands. Will cost you under $20 most likely, and you will get PLENTY of results most likely depending on your community's size.

Go to your nearest college or board of education. They will help you out just fine. Say you are working on a Operating system project involving limited resources and you are in dire need of antideluvian hardware. Most places will jump at the thought of tossing out their old trashware (My college had a closet full of 486 and earlier).

Oh and I would just like to give a shout out to Smoothwall: the poor man's cisco. It rules! I have been running mine for like a year now with no qualms!

hmmm...nice ideas...I would f irst try to approach a college and try to get hold of a machine...thanx for all suggestions and recomendations..
AO rocks

hi
you would like to see all traffic running from and off the internet ? well I recommend get a 10/100 HUB . plug it between your cablerouter and your other switch and rear equipment . on the hub connect a system ( I prefer w2k -> more stable und reliable) and let ethereal or tcpdump as recommended running on this machine. only on a hub you see ALL Packets going and coming into your network. all other equiment should be connected on your switch. only the sniffer pc goes with the hub !
maybe a little help.
skarsatai