OS2 World.Com Forum

Subject  :  Injoy firewall in between external router and external switch?
Author  :  JLKT
Date  :  31 Aug, 2005 on 15:16
Hi everyone.

I have a network currently setup like this:

Internet --> Dlink Router with DHCPd --> GATEWAY PC with 2 nics, firewall and DHCPd client and DHCPd server --> External Switch --> LANs PC with DHCPd client

The router gives out IP address such as 192.168.1.2. The gateway pc take this IP address automatically with its DHCPd client, at the same time, gives out IP addresses to the internal Lan PC such as 192.168.0.2, 192.168.0.3, etc.

I am currently running clarkconnect (based on redhat distro) as the software firewall on this gateway pc and it is working fine. The reason I need this software firewall sandwiched between the hardware router and the switch is so that I can control the bandwidth of the LAN users. My dlink router does not have QoS functions.

I would like to try out injoy firewall as a viable replacement to Clarkconnect. I first tried this setup on a friend's place which has the same setup as I do, but Injoy firewall just does not transfer packets from the internal lans to the internet. I am not sure what is done wrong. I have read the docs and nothing seems to work.

Is it at all possible to achieve this using OS/2?

Best regards
Joseph Lo


Subject  :  Re:Injoy firewall in between external router and external switch?
Author  :  diver ecs@aroa.ch
Date  :  01 Sep, 2005 on 11:37
did you enable ip forward? in the tcp/ip settings

Subject  :  Re:Injoy firewall in between external router and external switch?
Author  :  JLKT
Date  :  01 Sep, 2005 on 15:15
Thanx for the response.

I couldn't remember now but I believe so. I will try again to confirm. I need to wait until the weekend to try though, as the network will then be unused.

But is what I am trying to achieve a common practice for OS2ers? Or am I trying to do something totally unconventional?

I want to know if this is possible with injoy and dont want to end up in a wild goose chase. This setup is actually for my workplace and I want to minimize inconvenience to the lan users.

Best regards
Joseph


Subject  :  Re:Injoy firewall in between external router and external switch?
Author  :  eCSRD
Date  :  04 Sep, 2005 on 02:17
Hi !

Check that the default driver used is fxwrap. If not, no traffic will go through injoy firewall.

The file to verify : ?:\IBMCOM\PROTOCOL.INI

e.g. some parts of my config.

[IBMLXCFG]
netbeui_nif = netbeui.nif
tcpip_nif = tcpip.nif
FXWRAP_nif = fxwrap.nif <<< Injoy firewall
RTL8139_nif = RTL8139.nif <<< my network card
...
[netbeui_nif]
DriverName = netbeui$
Bindings = FXWRAP_nif
ETHERAND_TYPE = "I"
.....
[tcpip_nif]
DriverName = TCPIP$
Bindings = FXWRAP_nif
....
[FXWRAP_nif]
Drivername = FXWRAP1$
Bindings = RTL8139_nif
.
Under tcpcfg2, I defined DNS servers and default IP@
Under Injoy firewall, I defined needed local networks (IP@) "to secure"

At Injoy internet link, you'll find a readme for OS/2 with helpfull info in it.
Hope it will help you.


Powered by UltraBoard 2000 <www.ub2k.com>