Router build in the House with Ubuntu

Many homes now have Internet access alone. Some of them even if it is using the broadband connection rather high speed. The question, is the Internet connection is shared with several PC or notebook at home? The answer may be, through router!

Router is made - even if the class for the home - has guaranteed stability and security of enterprise-class because it is supported by the Linux operating system. Eits not lucky the first Linux. Linux is a deliberately chosen from the Ubuntu Desktop distribution - and the easiest Linux distro to use as much work. We guarantee you enggak match the Linux command line a lot of ditakuti by nonexpert users.

Here we use the Desktop version of Ubuntu Linux 8.10 (intrepid ibex). But Ubuntu users under version also can follow the steps remain the same. Oh yes, the router is made with the application firestarter (www.fs-security.com) have 100% with license free. Original, this application is a router with firewall features. So your router will have a firewall facility. Fun, huh?

Let's begin. As a first step, prepare a PC that is Ter-install Ubuntu and have an active Internet connection so you can browse there. Do not forget to also provide an additional network card to connect Ubuntu to the local network.

Installing the Main Components
1. There are two main elements must be installed before we can run PC as a router, the firestarter and DHCP (Dynamic Host Configuration Protocol). DHCP parts only need to install if you want the IP address is automatically allocated to the client. If you want to set the address manually, DHCP is not necessary to install. To install firestarter and DHCP, click the menu System> Administration> Synaptic Package Manager (SPM). Then enter your Ubuntu root password (if requested).

2. From SPM, take advantage of the facilities "Quick Search" to find package firestarter. If you have met, click the small box next to the package firestarter and select "Mark for Installation."

3. Next, in the same way, do a search for packages DCHP. If the SPM provides options, be sure to select the package "dhcp3-server". Click the box again and select "Mark for Installation." Then click the "Apply" with a green check icon above. The rest of the Linux though.


Router configuration
4. If the installation is running smooth, the next step is to configure firestarter so that all connections from the client may be forwarded to the Internet. Run firestarter from the menu Applications> Internet> firestarter, and enter the root password when prompted Ubuntu.

5. Firestarter from the main window, click the Preferences menu at the top (make sure the tab "Status" is active), then select Network Settings. 2 Note the drop-down box in there. The drop-down box in the network interface is connected to the Internet. If using an Ethernet network card, indicated the most likely is "eth0". While the drop-down box that shows the interface both for local networks.

6. If you have determined where the Internet and local network, you enable (check) the option "Enable Internet connection sharing" and "Enable DHCP for local network" (automatic allocation of IP clients ). Range allocation with DHCP IP can also specify your own by clicking the black arrow beside the option "DCHP server details." Other options on this window can be left as is, because we need it.

7. After all is set finished, click "Accept". By clicking on the button "Start Firewall", you have a PC to a router to share your Internet connection. Easy, is not it?



Tips: Bonus Firewall

Is incomplete if a router is not equipped with safeguards to prevent further attacks that may come from the real Internet. Fortunately, firestarter is designed to secure the PC connected to the Internet, including the client, the client is connected through the Internet Connection Sharing facility.

In fact, by default, firestarter is working as the first time since the firewall is enabled. But the default settings that we still have a lot of holes that are not closed if no candidate can not be penetrated cracker.

When security becomes a priority when you surf the world, no one following the steps below.

A. Off attacks from the Foreign
1. Reopen the Preferences window firestarter. This time select "ICMP Filtering" and enable (check) the option "Enable ICMP Filtering". Ignore other options below it if it does not have other features of the ICMP protocol which allowed the PC received. Next, click the Accept button.


2. Return to main window firestarter, and select the tab "Policies". Editing options, ensure that the selected "inbound traffic policy" which means that we make rules about "anyone who can access the port from the PC or the Internet." If no port that can be accessed from the Internet, and then ensure that the list of "Allow connections from host", "Allow service" and "Forward service" in blank. Conversely, if you want to allow a host from the Internet is connected to this router, right-click an empty area list "Allow connections from host" and select "Add rule". Then enter the IP address of the host allowed to access the router. If you have, do not forget to click "Add" and "Apply". How do the same to allow connection to port / services from the Internet, you just have to work the list "Allow service".

3. If you have, try to test your PC with the help of sites belonging to the security audit Gibson Research (www.grc.com). Compare results before and after the configuration is done (see if you get a predicate "passed" in Analysis TruStealth or not).


B. Restrict URL Access Client

After successfully restrict access from outside, now we create limits clients to access the Internet. This is especially useful if you want to save bandwidth or to prevent users under the age of a site that does not access the operation. Here's how to do this.

1. Firestarter from the main window, click the tab "Policy" editor and change the dropdown to "outbound traffic policy". This option is used to limit client access to the Internet or a local distortion of inbound traffic policy "that we are above.

2. Akan appear on two radio button options each contains "permissive by default, the black list of traffic" and "restrictive by default, whitelist traffic". Permissive by default used if you want to allow all data traffic from clients to the Internet and use the list to block the policy address, host or service / port specific. Instead, strictly applied by default to block all traffic from the client data to the Internet and use the list of rules to allow access to addresses, host or service / port specific. If you want to block specific address, select permissive by default.

3. To order that firestarter to block specific sites, to do right by clicking the empty area in the list of "Deny connections to host", select "Add rule". Enter the IP address or domain name (without "http://") in the field "IP, host or network, and then click Add. If you have, do not forget to click Apply at the top of the firestarter. Try to visit a blocked address before using the browser.