- ###########################################
- # /etc/network/interfaces #
- ###########################################
- auto lo
- iface lo inet loopback
- auto eth1 eth2
- # eth1 = inside interface
- iface eth1 inet static
- address {My Internal Static IP}
- netmask {My Internal Subnet Mask}
- broadcast {My Internal Broadcast}
- network {My Internal Network ID}
- post-up iptables-restore < /etc/iptables.up.rules
- # eth2 = outside interface
- iface eth2 inet dhcp
- ###########################################
- # /etc/dhcp/dhcpd.conf #
- ###########################################
- authoritative;
- subnet {My preferred subnet} netmask {Subnet Mask Dotted Decimal} {
- range {DHCP Range of addresses};
- option subnet-mask {Network Mask};
- option domain-name "{Domain Name}";
- option domain-name-servers 8.8.8.8, 8.8.4.4;
- option broadcast-address {Network Broadcast Address};
- option routers {GW IP Address};
- #Static Reservations
- group{
- host ws-1 {
- hardware ethernet {MAC Address};
- fixed-address {Reserved IP Address};
- }
- } # end Group
- }
- ###########################################
- # /proc/sys/net/ipv4/ip_forward #
- ###########################################
- 1
- ###########################################
- # /etc/sysctl.conf #
- ###########################################
- # Uncomment the next line to enable packet forwarding for IPv4
- net.ipv4.ip_forward=1
- ###########################################
- # Traffic Filtering #
- ###########################################
- Install iptables and configure to allow all traffic
- Update rules to filter nasty stuff
- ###########################################
- # Content Filtering #
- ###########################################
- Install squid/dansguardian and configure as needed
SHARE
TWEET
Untitled
a guest
Mar 11th, 2015
173
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
RAW Paste Data
