untangle Open Source Network Gateway
Submitted by Paul Gormley on Mon, 27/04/2009 - 11:43
Currently we use a combination of a Hardware and Software firewall solution (namely a Fortigate 100a and MS ISA 2004) to protect ourselves from the big bad www. Our plan is to replace both with an open source solution called untangle, basically a free network gateway which offers what our current solution offers plus a lot more, in the form of web filtering, spyware blocking and a more robust reporting engine (that doesn't require a PHD to operate).
First things first, setting up the untangle solution in a test environent, installed (on a 3 year old Dell Optiplex) untangle as the gateway with 3 NIC's, External, Internal & DMZ, configured a web server (again on a on a 3 year old Dell Optiplex with a WAMP stack) placed in the DMZ (using IP 192.168.2.x) tested and viola, all was working..... externally also...
Next up was to setup a machine on the LAN, I set the internal NIC to handle DHCP (IP address 192.168.1.x) ,tested web traffic and all was good... so far so good...
Next stage is to get RDP to the DMZ setup....
Using a 'Packet Filter' we setup a ruled called RDP to DMZ (Imaginative eh?) with the following parameters set:
Source Interface: Internal
Destination Address: IP of WebServer in DMZ
Destination Port: 3389 (RDP)
