[H-GEN] Re: Unix vs NT (religious war :-)

[Anthony Towns]

On Sun, Aug 01, 1999 at 10:54:47PM +1000, root wrote:
> Now everyone is warmed up ..... I wonder if the experts can 
> come up with a five minute plan to get routing sorted out 
> on a Mandrake 6 box to allow some Win98 / Win2000 boxes with 
> "real" IP's to browse the net etc ??

Get the hardware to connect the Linux box onto both the local network,
and the Internet.

Make sure you can do this.
	(Get an Internet account; skim all of the NET-3-HOWTO,
         and read as much of it as you can; setup wvdial, and get masqdialer
         and read its manual)

Learn how to do firewalling so you don't let the nasty people out on
the Internet casually destroy any work you might be doing or have ever
done on either the Linux box or the Windows boxen.
	(http://www.linux.com/security/ - read the articles don't just
         look at the pictures; read the FIREWALL-HOWTO; follow the advice
	 you find)

Act on what you've learnt, and set these up.

At this point, you should be able to more-or-less safely use the Internet
from the Linux box and the Windows boxen with *real* IPs.

Next, install squid, and configure it. Set it up to use the appropriate
parent caches, and set up the Linux and Windows boxen to refer to it.
Bandwidth is a precious resource, conserve it any way you can. You'll
get a speed increase when viewing similar sites from different clients
too, and possibly a lower bill from your ISP.

Next, read the IP-Masquerade mini HOWTO (probably in
/usr/doc/HOWTO/mini/IP-Masquerade) and install a dhcp daemon (not a
client daemon) on the Linux box. Read the docs for it, too. Then tell
your ISP that you no longer need most/all of the real IPs given to your
windows boxen, and help preserve another scarce resource. Then setup
masquerading on the Linux box, and use DHCP to assign reserved IPs
to all the Windows machines.  Your ISP bills probably become cheaper,
your firewall becomes a little more secure, and configuring your Windows
networking becomes an order of magnitude easier.

It won't get done in five minutes, but on the upside, your systems work
better, and they're less of a burden on the rest of the Internet. You've
reached intermediate-experienced status as a Linux Mandrake sysadmin,
and can charge outrageous consulting rates to make other people's computers
do what they're meant to.

Cheers,
aj

-- 
Anthony Towns <aj at humbug.org.au> <http://azure.humbug.org.au/~aj/>
I don't speak for anyone save myself. PGP encrypted mail preferred.

 ``The thing is: trying to be too generic is EVIL. It's stupid, it 
        results in slower code, and it results in more bugs.''
                                        -- Linus Torvalds
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 434 bytes
Desc: not available
URL: <http://lists.humbug.org.au/pipermail/general/attachments/19990801/b3e25ac2/attachment.sig>