Linux newbie needs help starting off

[PonzSpyder]

I want to get a box with Linux up and running so that I can start playing with the OS and learn something new. I would like this box to serve as a Proxy/Firewall, I found "Single Network Firewall 7.2" for Linux which looked perfect for my use but... Linux is completly forign to me so I get confused when I see words like Mandrake, Red Hat, etc, etc... So, basically what I am asking is for guidance from you people that know this OS as well as I know Windows...

My Requirements:

- Free - this is the main thing I like about Linux without having run it yet

- Can be used as a Firewall & Proxy/Router type server

- Not too difficult to configure but then again, I dont want to be limited by a oversimplified version or something. I am a fast learner

- sufficient program support so I have enough stuff to play with

My Specs:

- Pent II 200 MMX

- 64MB SDRAM ( planning on upgrading if the Mobo can handle it )

- 20 GB Maxtor

My Questions:

- Whats with all the different vesions?

- What exactly do I need to install on this box?

- Where can I get the software from?

I need help & sugestions here, tell me what you think I need to install based on my requirements and specs here. If I left anything important out, please let me know

[SpiffGQ]

Mandrake, RedHat, etc are all distros of Linux. They are different companies packaging Linux components into a nice boxed set. RedHat and Mandrake both make a version of Linux specifically for firewalls and you don't have to really know any Linux to set up the Mandrake one. There is also a distro of Linux called SmoothWall that is designed to be a firewall.

For help and docs on linux, try Linux Doc (alt link) or posting in the forum at Linux Junior or here.

[pbharris]

uhhh - what t048 said

[MDdan]

You're doing what I just finished, and other than a ridiculously large drive, you've got the same hardware I used. (see SNF and Smoothwall threads in Networking section)

Both Smoothwall & Mandrake SNF will require you to use NICs that they have drivers for. If you're buying NICs, get PCI ones cause you won't have to enter all that messy stuff that you do with ISA NICs.

I'm using a couple Realtek nics and they work great. They have the added advantage of being dirt cheap, alot of generic NICs are Realteks. There are other NICS that would also work just fine. I've also read many people say "get two different models of NICS, so you can tell interfaces apart." Either I'm missing something, or that's kinda pointless. It's really not that hard to tell two nics apart (different Mac address and besides if you confuse which is which, just try swappin the ethernet cables around, there's only two of em)

If you want to have a DMZ, pick up a third nic so that you can separate traffic from your LAN.

I used a 540mb HD, and I've got room to spare. Pick up a small drive, even if you have to buy it for $15, and save that 20gb one for a workstation.

Once you get it going, you won't need a monitor, keyboard or mouse (well, you don't need the mouse regardless). Just log in through the web interface from the LAN.

Oh, one more important point: Your firewall is not a linux box to play with(not that you can't, just not the best way to learn linux). Better to build a Linux workstation AND a linux based firewall. Neither SNF nor Smoothwall have much on them (no X server, and as a result no mouse and nothing pretty to click on)

Go with Redhat or Mandrake & KDE on your workstation...that's my advice as a very newbie to Linux.

Hey good luck, and share what you learn, cause I'm new to this crazy Linux stuff too.

[PonzSpyder]

t048: Thanks for the links, I will be checking them out very shortly

Although... the thing with Linux is, when I am looking up info I start wondering if I am reading about a distro that also has a firewall built in to the OS or a firewall program that requires a particular version of Linux to be installed first.

For example, if I installed this SNF thing, would I need to install Linux first or is it all part of the same beast? I read that the "Operating system is based on a Linux 2.2.19 secured kernel." from the SNF link but, even though that sounds to me like it is it's own OS, I think I need confirmation... Forgive me for sounding stupid here, If you asked me about Windows I would be able to help in most situations but give me a Linux issue as simple as this and I am done for...

MDdan: Sounds like you have some very helpful info for my situation, thanks for the reply . I may be asking you questions again at some point, hehe.

I just couldn't get it to run. It was my nics, it didn't like em. It would probably run just fine with my current nics- a Realtec 8139 & a 8029

Although, by reading one of your other threads that this quote came from it looks like you didn’t go with SNF in the end because of a NIC conflict... the thing that brought my attention to setting up this firewall/proxy was a few reviews I read today about SNF, it sounded interesting so I wanted to try it out unless anyone here has something against it. Other people have seemed to get it running so I am assuming that things would go well for me after I get the correct NIC's?

"get two different models of NICS, so you can tell interfaces apart." Either I'm missing something, or that's kinda pointless

In WinNT I have noticed this to be helpful because when you are changing IP settings and whatnot on a particular NIC, you chose it from a pull down menu. If they are the same exact card, there is nothing to tell you the difference between them in the drop down and if your IP ranges closely resemble one another, this may cause confusion when selecting the NIC to make changes on. You don’t want confusion when making these changes on an office network where a unforeseen downtime means lost productivity.

Better to build a Linux workstation AND a Linux based firewall

Ok, in that case maybe I should give my Pent 100 a shot at being the firewall and leave the Pent 200 for a Linux workstation sometime in the future. I know the requirements on Linux are not high usually but would a Pent 100 ( 96 RAM ) really be enough for it?

thanks again for the replies and I will look into those links and see if I can grab a few Realtek NIC's to try out

If anyone has more to tell me, please feel free. Especially if you have gotten SNF to run well, tell me what I might need for it.

[CMonster]

I only wish you lived out here in Southern California near me - I'd set you up well.

[MDdan]

The P100 with 96mb of RAM is perhaps even overkill for Smoothwall. I would expect SNF to be similar. Most folks could probably use a 486 with no problems (i have one I'm gonna setup here one of these days)

I really like Smoothwall, but If I were you I'd go with SNF. I trust Mandrake more than Smoothwall, and it sounds like the next editions of Mandrake's firewall should be even better.

There's also a Smoothwall variant called Ipcop that's worth a look I suppose.