What Standalone Firewall? ComputerWith2XNic's or an off-shelf Router?
Posted on 2004-04-01
I have been asked to setup a firewall. The only firewalls I have setup before are software based that include an application spawning sandbox etc and have all been on a Win2000 workstation acting as a server for less than 10 users. I am very familiar with such firewalls but not at all familiar with any version of windows that are in the server family SBS, NT, Win2000S.
The firewall I have been asked to do is for a computer that is running Small Business Server 2000.
The computer is not connected directly to a broadband modem etc but (Apparently) is plugged into an RJ45 wall socket that supplies the entire building (multiple companies) with the internet (I have no idea what this could be any ideas are gratefully received).
The staff are in a pickle about not having an external (to the SBS computer) firewall (management has decided it wants one) and cannot find out much about the system they have as they are not very technical so please excuse my lack of information.
So I need to put a firewall between the SBS computer and the RJ45 jack in the wall that provides the broadband. This all sounds good to me as I am less likely to cause problems with the SBS computer software of which is alien to me. Unfortunately the staff have just realised that there other branch link to there one via a VPN (I don't know the security type IPSEC?).
Can I build a Windows 2000 workstation (I don't know Linux) with two network cards in it and a software firewall and place it between the SBS computer and the Wall to allow ALL traffic, except that blocked by the firewall, to parse through from the WAN adapter to the LAN adapter? - Thus creating an external, to the SBS computer, firewall. I believe this is also called a sandbox.
If so do I just use the ADD ROUTE command to throw everything from the WAN adapter to the LAN adapter, except 127.0.0.1 and the local machine IP, and use the software firewall to do its business?
Should I use an off the shelf combined firewall router with an RJ45 as the WAN instead of the standard (Remember I am only use to small systems) broadband telephone RJ11 port?
If so what one? OK, just a hint or personal favourite then!
I have put 500 points on this because its urgent and you can bet someone answers with something I wont understand and I will need the idiots walk through guide : )
Thanks for your help in advance, Ralph.