AW: Free Firewallsolution for a Testlab with multiple Networks and VPN

[<nl () forststrasse27 de>]

Hi,

Thanks for your replies!
Today i had a look on m0n0wall
http://www.m0n0.ch/wall/

I think that provides all what I need, is easy to manage and provides good
security.

Features:
- BSD-based
- Runs on embedded devices
- Only 5MB Diskspace or CF-card required or even bootable from cd
- Config is saved in a xml file 
- IPSEC & PPTP 
- Multiple internal Net's/Nic's supported  

There's even a VM image to download for a quick view on the product.

Regards
Tom

-----Ursprüngliche Nachricht-----
Von: listbounce () securityfocus com [mailto:listbounce () securityfocus com] Im
Auftrag von Palmer, Mark
Gesendet: Dienstag, 13. März 2007 15:39
An: nl () forststrasse27 de; security-basics () securityfocus com
Betreff: RE: Free Firewallsolution for a Testlab with multiple Networks and
VPN

Or you can use the forked version of Smoothwall (http://www.ipcop.org)

Mark Palmer


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Murda Mcloud
Sent: Monday, March 12, 2007 6:59 PM
To: nl () forststrasse27 de; security-basics () securityfocus com
Subject: RE: Free Firewallsolution for a Testlab with multiple Networks and
VPN

Offhand, I'm thinking that smoothwall might be able to do this.
Check it out:
http://www.smoothwall.org/

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of nl () forststrasse27 de
Sent: Sunday, March 11, 2007 4:46 AM
To: security-basics () securityfocus com
Subject: Free Firewallsolution for a Testlab with multiple Networks and VPN

Hi,

we have currently a Testlab with a 192.168.1.0 net behind an iptables
Firewall. Remote Acces is currently done  with a ssh-Tunnel to the firewall
and then connecting the machines via remote desktop.

Now the Lab will increase with more net's and more people accessing it.
(some of them should only be able to reach 2 PC's via Remote Desktop in
let's say the 192.168.2.0 net.)

I'd like to do it the following way:
- Give the firewall more networkcards one for each net.
- Enhancing the IPTables (or replace with another free solution) that the
users can connect with Windows L2tP-Ipsec connection to the firewall. (I
don't want to install vpntools on the clientside).  Depending on the
Username&PW of the VPN connection the Clientpc's will get different IP's in
the Testlabnet. User A will get 192.168.1.100 and User B 192.168.2.100.
- For the Users who only should reach 2 PC's I think it's sufficient that
they only get Username&PW for the Remote desktop access.

As I am new to that stuff:
Can I do this with Iptables/Linux? What tools will I have to install for the
VPN connection from Windowsclients on the Firewall? Is there a Howto? ;-)


I know with the Astaro Firewall I could do this and I would have a nice &
easy interface.. but iam not allowed to spent money... Is there comparable
freeware?



Thanks for your help!
Regards Tom