DRAFT

This describes how I have set up my Personal Telco node, with NoCatAuth. The firewall is based on a CloneArmy box from FreeGeek which came with Debian Linux a number of services and NoCatAuth installed and partialy configured.

Hardware

Access Point

D-Link DI-711 Wireless Router

This router provides a Wireless networked, bridged to a 100/10 Mbit Ethernet and a 10 Mbit ethernet for connection to a DSL or Cable Modem. It provides DHCP the local net and NAT(Network Adress Translation) routing to the DSL/Cable modem.

NoCatAuth Firewall

Clone Army Box

Pentium based PC, two ethernet interfaces, 1GB harddrive. Running Debian Linux, NoCatAuth, ISC DHCP daemon.

Configuration

DI-711 DHCP is disabled and dhcpd is provided by the Firewall. The Firewall's internal ethernet conection is connected to the internal network of the DI-711. The firewall provides DHCP, routing and NAT to the internal LAN. DNS service is provided by the ISP.

It is my intention to describe all the configuration changes from the standard instalations, we will see how well I have succeded. most(all) of this should apply to any Linux or UNIX running NoCatAuth and DHCP.

NoAuthCat

Changes to /usr/local/nocat/nocat.conf from the file delivered with the NoCatAuth distribution.

GatewayMode     Passive

If I read the comments in the config file correctly I should not need this but only Open and Passive seem to work for me.

GatewayLog      /var/log/nocat.log

Log file located with the rest of the log files

HomePage        http://www.personaltelco.net/

Use Personal Telco page

ExternalDevice  eth0

Specify External (internet side) Device

InternalDevice  eth1

What ever you are using for a local network, I just use the 192.168.x.x networks out of habit.

DNSAddr 216.231.41.22

I could probably have run a DNS relay server, but it was just easier to use my ISP's server.

DHCP

/etc/dhcpd.conf

# dhcpd.conf
#
# Sample configuration file for ISC dhcpd
#

option subnet-mask 255.255.255.0;
default-lease-time 600;
max-lease-time 7200;

subnet 192.168.1.0 netmask 255.255.255.0 {
  range 192.168.1.100 192.168.1.199;
  option broadcast-address 192.168.1.255;
  option routers 192.168.1.1;
  option domain-name "local-14.personaltelco.net";
  option domain-name-servers 216.231.41.22;
}

[CategoryExample] [CategoryDocumentation]