Firewall Configuration with new change
-
@thecreativeone91 said:
@Lakshmana said:
@thanksajdotcom This firewall is just to access the LAN from WAN to connect SSH ports
SSH is open by default. I'm not sure what you mean access LAN from WAN unless you mean SSH tunneling?
Port forwarding.
-
@Dashrender said:
@scottalanmiller said:
Also, this is relatively complicated, because of technical reasons I'm not going to go into to save on confusion, but you cannot "open" a port on a firewall like this. You have to "port forward". So you have to know the IP Address to which you want Port 22 (SSH) to be forwarded. Only one machine on the LAN can have SSH accessed from the WAN.
On port 22.
Right. You can forward different external ports to internal port 22 on different IPs. That's another way to do it.
-
-
@thanksajdotcom said:
@Dashrender said:
@scottalanmiller said:
Also, this is relatively complicated, because of technical reasons I'm not going to go into to save on confusion, but you cannot "open" a port on a firewall like this. You have to "port forward". So you have to know the IP Address to which you want Port 22 (SSH) to be forwarded. Only one machine on the LAN can have SSH accessed from the WAN.
On port 22.
Right. You can forward different external ports to internal port 22 on different IPs. That's another way to do it.
Too much work. Too much to keep track of.
-
@Lakshmana Why don't you use the wan IP of the CentOS box to SSH into then SSH from that to the LAN machines?
-
@thecreativeone91 If this is possible to do?
-
@thanksajdotcom said:
Right. You can forward different external ports to internal port 22 on different IPs. That's another way to do it.
Don't keep adding new concepts. Let's stick just to getting through his one question. He's confused enough.
-
@Lakshmana said:
@thecreativeone91 If this is possible to do?
It's super easy. So much easier than port forwarding in the firewall. And far more useful.
-
@scottalanmiller Yes Scott I got somewhat confused
-
@scottalanmiller Can you explain Scott
-
Is there a reason that you are using CentOS for this? This is a rather complicated setup that a normal IT pro would not do. Normally you would simply install a firewall product like SmoothWall or pfSense and be done with it. Far easier AND more secure. You should be done in minutes and not need to learn anything new.
-
@scottalanmiller My manager said me to install firewall with IPtables only
-
@Lakshmana said:
@scottalanmiller My manager said me to install firewall with IPtables only
Your manager is an idiot. There is no way around that.
But even still, use SmoothWall, it uses IPTables. So you meet his requirements in a more sensible way. Installing CentOS makes no sense.
-
@scottalanmiller Ok OK.I need to install the smoothwall in the centos and after that I need to do that.Right
-
When I tried to give the centos machine IP as 192.168.200.40/24 and gateway as 192.168.200.1/24.But the system in VM did not ping after giving gateway in the ifconfig of eth0
-
@Lakshmana said:
@scottalanmiller Ok OK.I need to install the smoothwall in the centos and after that I need to do that.Right
It's a pre-built appliance. You'd need to just download whatever Router OS you are going to use and install it.
-
@thecreativeone91 how to download ?sudo apt-get install ????
-
@Lakshmana said:
@thecreativeone91 how to download ?sudo apt-get install ????
Not. It's not an application package. (CentOS uses Yum not apt-get anyway) but it's a pre-bulit system of applications, configs, etc.
https://www.pfsense.org/download/
http://www.smoothwall.org/download/ -
@Lakshmana said:
@thecreativeone91 how to download ?sudo apt-get install ????
CentOS uses yum, not apt-get. apt-get is Ubuntu.
-
@thecreativeone91 said:
@Lakshmana said:
@thecreativeone91 how to download ?sudo apt-get install ????
Not. It's not an application package. (CentOS uses Yum not apt-get anyway) but it's a pre-bulit system of applications, configs, etc.
https://www.pfsense.org/download/
http://www.smoothwall.org/download/Exactly. Wipe your current VM and start over. Download a pre-built ISO and install that.
