Kamis, 05 Juli 2012

Install Firewall, Routing dan NAT (Shorewall)


Install Network

# nano /etc/network/interfaces

isikan konfigurasi network yang ada dibawah ini, sesuaikan ip dan gateway
# The loopback network interface
     auto lo
     iface lo inet loopback
# The primary network interface (outside)
     auto eth0
     iface eth0 inet static
     address 192.168.254.104
     netmask 255.255.255.0
     gateway 192.168.254.254

simpan, dan restart network
# /etc/init.d/networking restart

Setelah Selesai.. Restart System
# reboot


Install Lamp (Linux, Apache2, MySQL, PHP)

Untuk keperluan Manajemen Server dengan Web GUI dari browser Client
#tasksel
Pilih OpenSSH (untuk putty ssh), LAMP Server

Setting DNS Server
# nano /etc/hosts
Isikan ip localhost dan IP Jaringan Server Proxy

127.0.0.1        localhost.localdomain    localhost
127.0.0.1        Perbend.localdomain    gw

# echo gw.srv.local > /etc/hostname
# update-rc.d -f apparmor remove

Install DNS
# apt-get install bind9
# nano /etc/bind/named.conf.options
Isikan dengan
forwarders {
     # Replace the address below with a known DNS server
         8.8.4.4;
         8.8.8.8;
     };
# touch /etc/resolv.conf
# nano /etc/resolv.conf
simpan, dan restart network
# /etc/init.d/networking restart

Install Firewall, Routing dan NAT (Shorewall)
# apt-get install shorewall

Config
# nano /etc/shorewall/shorewall.conf
tambahkan
STARTUP_ENABLED=Yes
IP_FORWARDING=On

# nano /etc/default/shorewall
agar shorewall dijalankan saat restart
startup=1


Copy default configuration files from the docs:
# cp /usr/share/doc/shorewall/examples/two-interfaces/* /etc/shorewall/

Setting Interfaces
ubahlah interface sesuai dgn keadaan jaringan anda
# nano /etc/shorewall/interfaces

# nano /etc/shorewall/zones

Jika ingin dilakukan NAT (Router)
# nano /etc/shorewall/masq
Tambahkan
eth0 eth1 atau ubah default sesuai dengan keperluan

Tentukan Policy
# nano /etc/shorewall/policy