Dotaz: wifi klient + firewall

[Daniel Tihelka]

Ahojte,

shanim nejake dostupne (do 3000) AP s funkci klienta, ktery ma v sobe zaroven switch a hlavne firewall.

Coz o to, takovych produktu je spousta. Vsechny ale pouzivaji firewall na pakety jdouci z eth na wifi. Co potrebuji je ale firewall opacny, filtrovat pakety jdouci z wifi na eth -- bohuzel nemuzu nainstalovat firewall na vsechny pocitace za wifi klientem, a neverim, ze by wifi na kterou jsem pripojeny sit byla bezpecna.

V diskuzich jsem zde nasel 2 doporucovane AP, ASUS WL 500G a Linksys WRT G54. Obe se ale zdaji mit "opacny" firewall.

Mate teda nekdo skusenost, jak to s temi firewally je? Nebal bych se ani vlastniho nastaveni iptables podle mych pozadavku na danem AP - slo by to? Ktere by jste doporucili? Je to "dostatecne" bezpecne a "jednoduche" (v tom smyslu, abych zarizeni trvale neposkodil, a i pri moji chybe bych se mohl vratit k puvodnimu stavu)

Druha moznost je nakonfigurovat pocitac jako router, ale zatim bych se drzel te prvni moznosti

Diky moc vsem, Dan

Odpovědi

[GeishaX]

Teď jsem kupoval MSI RG54GS2, W-LAN Router+Print serv.

Z administrace: Basic Setting - Configure the basic settings to enable the firewall to protect your network from hacker attacks. MAC Address Control - MAC Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address. Packet Filtering - Allow you to control access to a network by analyzing the incoming and outgoing packets and letting them pass or halting them based on the IP address of the source and destination. Domain Filtering - Let you prevent users under this device from accessing specific URLs. URL Filtering - URL Filtering will block LAN computers to connect to pre-defined websites. Routing - If you have more than one routers and subnets, you may want to enable routing table to allow packets to find proper routing path and allow different subnets to communicate with each other. Schedule Rule - Apply schedule rules to Packet Filters and Virtual Server. Virtual Server - Configure the wireless router as a virtual server so that remote users accessing services such as Web or FTP at your local site via public IP address. DMZ - Open the client up to unrestricted two-way Internet access by defining DMZ. Special Application - Allow Internet gaming, video conferencing and Internet telephonys to work properly.

Kdyžtak pošlu manuál z CD