Network Configuration

Define your network architecture below. These values will be written in the file ´etc/net.cfg´. You can use the defined variables in all other configuration masks.

Tips: Define all used names in /etc/hosts on your firewall.
Define all used networks in /etc/networks on your firewall.
Try IP-Addr. or FQDN (e.g. maniac.jhf,de instead of maniac) if FCT has problems in detecting the correct network interface.

Use  as IP-Filter command

Network definition
Domain:  ($DOMAIN) Tip: Create an entry in /etc/networks
Netmask:  ($NETMASK) - e.g. '24' or '255.255.255.0'
IP Masquerading:   Internal Network ($masquerade_internal)   masq. $internal -> $perimeter also ($masq_int_peri)
(for all services!)  Perimeter Network ($masquerade_perimeter)

Use the variable '$internal' to describe your internal network in other masks - $internal=$DOMAIN/$NETMASK (is defined in Aliases).
Normally, IP-Masquerading is only needed for connections to the Internet ($any). Thus IP-Masquerading takes not place for connections from internal to perimeter network. You can enable this by checking the '$masquerade_int_peri' variable above. IP-Masquerading is actually not available for "IP-Filter".
 

Firewall devices and perimeter net

You have to define your firewall and all network interfaces. If you don´t have an internal and/or perimeter network, leave the fields blank.
Tip: Define all used names in /etc/hosts on your firewall.
External address: The address of the firewall on the external network defice ($FW).
External network device: The device which connects the internet - e.g. ppp0 ($OUT_DEV0).
Internal address: The address of the firewall on the internal network device ($FW_IN).
Internal network device: The device which connects the internal network - e.g. eth0 ($IN_DEV0).
Perimeter network device:  The device which connects the perimeter network - e.g. eth1 ($IN_DEV1).
Perimeter network hosts: ($PERIMETER)
List all hostnames (also aliases!) which are on the perimeter network (we use these names to set the correct network interface).
 

Host definitions

These are the most important services for a network. Define which host(s) serves the named service.
Use these values in the other configuration masks.
Tip: Define all used names in /etc/hosts on your firewall.
Try IP-Addr. or FQDN if FCT has problems in detecting the correct network interface.

Don't forget the entries in Perimeter network hosts above.
 
Services: 
DNS:
SMTP:
POP3:
FTP:
HTTP:
NNTP:
 
  Specials: 
Gateway: Do you really need a login gateway ($GW)?
Administration: These hosts can connect the firewall for administration ($ADMIN).
Accounting: Start accounting for these hosts ($ACCOUNT).
Visible hosts: Hosts visible from the internet - e.g. ping, telnet ($VISIBLE).
 


(c) 1998 J. Friedrich