Howto: Set up Ubuntu as a firewall/gateway router with webmin

[adyraw]

Great post.
It worked for me, had some problems changing sysctl.conf (permision denied), solved and it's ok.
Thanks.

[kevinthecomputerguy]

thanks again Sammy! I gave you some Props in my guide i am making, you were a ton of help.
http://woodel.com

[Corsari]

Hi sammydee,
I thank you for a different reason,

in few simple examples and words you gave me a better and sharper idea of the iptables logic.

Cheers
Robert

[Abhi Kalyan]

Fantastic HOWTO
Thank you

[sinkincaffein]

Thnaks for all de documentation! ! Ill start from here. Very usefull! !

[Rihoj]

At the beginning you said that 2 network cards are needed. I am new to a lot of networking ideas. So my question is as follows: 1 my desktop has the lan port on the motherboard, and then has a NIC installed. Will this work as the two network cards or, do they both actually have to be cards? 2. My desktops and laptops are currently windows, will this throw up any issue with setting up a ubuntu firewall?

[mongoose1927]

At the beginning you said that 2 network cards are needed. I am new to a lot of networking ideas. So my question is as follows: 1 my desktop has the lan port on the motherboard, and then has a NIC installed. Will this work as the two network cards or, do they both actually have to be cards? 2. My desktops and laptops are currently windows, will this throw up any issue with setting up a ubuntu firewall?

Rihoj, of course your built-in motherboard lan is counted as network cards. i used same setup in my router-server (i used 4 card thought). well, for the windows issue, your desktop need to be reinstalled with ubuntu server. i never know of a successful of a headless router-server using windows.

windows should be used to for ventilation. not for an OS. lol.

[c-m]

The DCHP part of the guide doesn't work any more.

In ubuntu 12.04 the DCHP webadmin module isn't correctly configured.

Have some of the paths/names changed?

The DCHP module works if you set the following paths:

DHCP server config file	- /etc/dhcp/dhcpd.conf 
DHCP server executable	- /usr/sbin/dhcpd
Command to start DHCP server - /etc/init.d/isc-dhcp-server start
Command to apply configuration	-  /etc/init.d/isc-dhcp-server restart
Command to stop DHCP server	- /etc/init.d/isc-dhcp-server stop
Path to DHCP server PID file	- /var/run/dhcp-server/dhcpd.pid 
DHCP server lease file	- /var/lib/dhcp/dhcpd.leases

The problem i'm getting is that I follow all the steps to create the subnet and can even see in the logs that I created a subnet, yet the module says "No subnets or shared networks have been defined.
"

[tellme]

Thank you Sammydee, you saved me a lot of headache !!! great tutorial

[Badhon_raj]

Hello @sammydee, Thanks for your nice howto. But I'm stuck at Configuring DHCP client options.
eth0 and eth1 not listed! how do I select it?

mint@mint ~ $ ifconfig -a
eth0      Link encap:Ethernet  HWaddr 90:2b:34:7c:5e:3f  
          inet6 addr: fe80::922b:34ff:fe7c:5e3f/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:10363 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:639741 (639.7 KB)  TX bytes:258 (258.0 B)

eth1      Link encap:Ethernet  HWaddr 00:05:5d:42:ba:97  
          inet6 addr: fe80::205:5dff:fe42:ba97/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:35396 errors:0 dropped:265 overruns:0 frame:0
          TX packets:9699 errors:0 dropped:0 overruns:3 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:10886166 (10.8 MB)  TX bytes:1311228 (1.3 MB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:2693 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2693 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:544253 (544.2 KB)  TX bytes:544253 (544.2 KB)

ppp0      Link encap:Point-to-Point Protocol  
          inet addr:10.44.51.68  P-t-P:20.20.230.254  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1492  Metric:1
          RX packets:8495 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9514 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3 
          RX bytes:7598052 (7.5 MB)  TX bytes:1085412 (1.0 MB)