Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




259 posts

Ultimate Geek
+1 received by user: 12

Trusted

# 140633 15-Feb-2014 22:08
Send private message

You'll laugh... but for 'old school' sysop memories I want to have a crack again at running a BBS on a box at home (192.168.2.1) and have it accessible via Telnet from the internet.

That said I want to keep this box off the rest of my home LAN (192.168.1.x) so it operates separately, can't see any of the other machines etc. to ensure if the box was ever compromised my home network is not under threat.

So I figure I need two subnets - right?

The BBS box on one and the rest of my machines on the other and some routing and NAT magic in between - sound ok?

My setup is a 2-Wire (Telecom) 2701HGV-W modem/router. It uses the 192.168.1.x subnet and most of my devices on the network have static IP assigned to them.. with a small DCHP pool set up for visiting devices to the home.

This connects to a TP-Link TL-SGL1008D 8 port gigabit switch which in turn talks to another identical device as well as another five port version by the same vendor.

Now I figure I could source something like http://www.gowifi.co.nz/coming-soon-new-products/ubiquiti-edgerouter-lite.html and attempt to configure things so that the 2-wire is placed in bridge mode (no firewall etc.) and then connects to the edgerouter.

Then set the edgerouter to pass traffic from the WAN to one Ethernet port handling the 192.168.1.x range  (home LAN) and another Ethernet port configured to pass WAN traffic on port 22 to the box connected to it set up as 192.168.2.1

Does this sound right so far?

Questions

I like the 2-Wire as I use the extra features (content filtering for kids etc. on it) and I figure I will loose those firewall toys if I drop to just bridge mode.

...so could I use a separate router/modem in just bridge mode in lieu of the 2-wire and connect this as the WAN to the edgerouter and then hang the 2-wire off another port on the router and the BBS box off the other port? Both ports on the router configured as suggested earlier to send traffic from the WAN to (mostly) the 192.168.1.x port (2-wire) or telnet traffic from the WAN to the 192.168.2.x port?

Are there better hardware options / set-ups (other than the edgerouter Ive identified) I should consider that would leverage the hardware I have in place already? I don't really want to start over as the present system works well for the home users. It's just accommodating this box within the home so that it's a seperate and secure from the rest of the LAN as possible.

I'm aware the edgerouter can do VLAN (not that I've used this tech before) but do you know if the switches I have would support it - I suspect perhaps not?

Cheers :-)




Create new topic
579 posts

Ultimate Geek
+1 received by user: 73

Trusted
Internet by Design

  # 988026 15-Feb-2014 22:14
Send private message

Something like the EdgeRouter could even just be used on your network to firewall the BBS subnet out from the rest of the network.
Give the WAN interface a static IP on your network then configure the firewall to block access to the rest of your network.
That way you keep the addon features of the EdgeRouter

No need for VLANs if you have a dedicated box plugged into the router for the BBS




Ask me about Web Servers, Wordpress and the internet in general.

 

 

 

Internet by Design


xpd

Chief Trash Bandit
9720 posts

Uber Geek
+1 received by user: 1676

Mod Emeritus
Trusted
Lifetime subscriber

  # 988106 16-Feb-2014 09:05
Send private message

Side question.... which s/ware you looking at using for the BBS ? Im tempted to start one again for some fun....




XPD / Gavin / DemiseNZ

 

Server : i5-3470s @ 3.50GHz  16GB RAM  Win 10 Pro    Workstation : i5-3570K @ 3.40GHz  16GB RAM  RX580 4GB Win 10 Pro    Console : Xbox One

 

https://www.xpd.co.nz - Games, emulation, geekery, and my attempts at photography.     Now on BigPipe 100/100 and 2Talk

 

Emulation - The art of getting your $4000 PC to run an 80's system - and still fails.


 
 
 
 


463 posts

Ultimate Geek
+1 received by user: 131


  # 988107 16-Feb-2014 09:09
Send private message

For the tiny amount of horsepower you'd need for a BBS, why not go to a budget VPS provider and not worry about your local network.

4081 posts

Uber Geek
+1 received by user: 1768

Subscriber

  # 988154 16-Feb-2014 11:46
Send private message

Yep EdgeRouter would be perfect.

Eth0 - PPPoE interface to connect to the network
Eth1 - Private LAN - 192.168.1.1/24
Eth2 - DMZ - 192.168.2.1/24

The EdgeRouter dynamically creates routes between interfaces so that part is super easy.
Then it is just a firewall rule to not allow DMZ to LAN and then a NAT masquerade rule to NAT the DMZ out through the PPP interface.



259 posts

Ultimate Geek
+1 received by user: 12

Trusted

  # 988177 16-Feb-2014 12:32
Send private message

xpd: Side question.... which s/ware you looking at using for the BBS ? Im tempted to start one again for some fun....


Well in the first instance I'm trying to restore an old spanned .zip backup of a Renegade system I ran in Hamilton between 1993-1996

There are net fossils etc. out there to bridge the internet connectivity required for old dos based software that used to seek 28.28k, 33.6k style connections.

The issue now is to get the data off old discs that have the odd sector error :-)






259 posts

Ultimate Geek
+1 received by user: 12

Trusted

  # 988178 16-Feb-2014 12:33
Send private message

hashbrown: For the tiny amount of horsepower you'd need for a BBS, why not go to a budget VPS provider and not worry about your local network.


I thought of that but have an old PC sitting around and would prefer a more 'hands on' approach to the hardware etc. than using a VPS and associated (small) costs.






259 posts

Ultimate Geek
+1 received by user: 12

Trusted

  # 988184 16-Feb-2014 12:55
Send private message

chevrolux: Yep EdgeRouter would be perfect.

Eth0 - PPPoE interface to connect to the network
Eth1 - Private LAN - 192.168.1.1/24
Eth2 - DMZ - 192.168.2.1/24

The EdgeRouter dynamically creates routes between interfaces so that part is super easy.
Then it is just a firewall rule to not allow DMZ to LAN and then a NAT masquerade rule to NAT the DMZ out through the PPP interface.


Thanks, this is good to know. I don't own an EdgeRouter (yet) but it seemed to be the first bit of kit I could find that might do the job.

Am I correct in thinking I can't put my 2-Wire into Eth1 as I'd end up with double NAT issues?
I ask because the 2-Wire has a lot of good content blocking etc. built into it's firewall that I use with my kids on the LAN and I'm looking for a way of preserving it.
Seems the only way to use the 2-Wire as a PPPoE interface is to turn off the Firewall/NAT and put in in bridging mode.
I could always use another spare modem/router I have lying around in as a PPPoE interface on Eth0 - but how to have my Firewall cake with the 2-Wire (if at all poss?)?

Paul




 
 
 
 


4081 posts

Uber Geek
+1 received by user: 1768

Subscriber

  # 988221 16-Feb-2014 13:46
Send private message

Ah sorry. Yea the 2-wire would have to be bridged and you would lose those parental controls.
You would actually need a DV130 so that you can fully bridge your ADSL - your just half-bridge the 2-wire.

Do the parental controls actually work properly though?

The other option would be to grab a Mikrotik (probably the 750) and do it that way. RouterOS has a web proxy/parental control feature. Bit more to set up but very powerful.



259 posts

Ultimate Geek
+1 received by user: 12

Trusted

  # 989248 17-Feb-2014 21:56
Send private message

chevrolux: Ah sorry. Yea the 2-wire would have to be bridged and you would lose those parental controls.
You would actually need a DV130 so that you can fully bridge your ADSL - your just half-bridge the 2-wire.

Do the parental controls actually work properly though?

The other option would be to grab a Mikrotik (probably the 750) and do it that way. RouterOS has a web proxy/parental control feature. Bit more to set up but very powerful.


Parental controls are quite good - hence desire to keep them

Re the Microtik are you talking about http://www.gowifi.co.nz/ethernet-adsl/mikrotik-routerboard-rb750gl-five-port-gigabit-router.html ?

If so would this be in lieu of the EdgeRouter - so I still end up running the 2-wire in Bridge mode? Reading the manual I think the 2-Wire runs as a bridge not half-bridge.

I couldn't quickly find references to the web proxy/portal on the MicroTik site but wondered if I needed to be wary of the RouterOS licence level being offered?





4081 posts

Uber Geek
+1 received by user: 1768

Subscriber

  # 989272 17-Feb-2014 22:19
Send private message

Yes you would use a Mikrotik instead of an EdgeRouter. The RB50 comes with Router OS Level 4 which unlocks pretty much everything you are ever going to need/want.

I don't think 2-wire does full PPPoA to PPPoE bridging so it would be half bridge - that is not really an issue.

Have a look at the Mikrotik Wiki for stuff about the Web Proxy. It is more complicated than your standard 'Parental controls' but much more flexible.

You would have to like tinkering to get it all running well.

I think if it were me I wouldn't bother trying to make a DMZ and just NAT the required ports directly to the BBS (I don't even really know what a BBS is though so probably not qualified to comment - I was born in 1990 lol). That would let you keep the 2-wire.

Is there an option in it to separate interfaces in to groups? That way you could achieve a DMZ with the same idea with firewall rules to allow traffic only to the net and not in to your LAN.

579 posts

Ultimate Geek
+1 received by user: 73

Trusted
Internet by Design

  # 989448 18-Feb-2014 09:13
Send private message

What I would do would be to use an EdgeRouter or a RouterBOARD or even an old computer as a router.

Give the WAN interface on your primary network, the LAN interface the DMZ details and then set a static route in your 2 wire to the WAN interface of the DMZ router, removing the double NAT in that bit.
You'll still have double NAT on the port forward side, but that's much less nasty than full double nat.
You just forward the port from the 2wire to the router and then from the router to the BBS host.

Then simply configure firewall rules to block all connection attempts to your main LAN, apart from traffic to/from the 2wire as required.




Ask me about Web Servers, Wordpress and the internet in general.

 

 

 

Internet by Design




259 posts

Ultimate Geek
+1 received by user: 12

Trusted

  # 990800 19-Feb-2014 22:10
Send private message

chevrolux: Yes you would use a Mikrotik instead of an EdgeRouter. The RB50 comes with Router OS Level 4 which unlocks pretty much everything you are ever going to need/want.

I don't think 2-wire does full PPPoA to PPPoE bridging so it would be half bridge - that is not really an issue.

Have a look at the Mikrotik Wiki for stuff about the Web Proxy. It is more complicated than your standard 'Parental controls' but much more flexible.

You would have to like tinkering to get it all running well.

I think if it were me I wouldn't bother trying to make a DMZ and just NAT the required ports directly to the BBS (I don't even really know what a BBS is though so probably not qualified to comment - I was born in 1990 lol). That would let you keep the 2-wire.

Is there an option in it to separate interfaces in to groups? That way you could achieve a DMZ with the same idea with firewall rules to allow traffic only to the net and not in to your LAN.


To answer your last question first - I don't think so but I wish there was.

Re BBS - Bulletin Board System - precursor to the internet (IMHO) whereby users could dial in via modem to computers running BBS software (14.4k, 33.6k style speeds) and exchange messages and files. ANSI was the popular graphics interface.

If I get my old one set up again (or something new) I'll post a follow-up address for you to Telnet in a have a look :-)

Many thanks for all your help and advice.

Best, Paul






259 posts

Ultimate Geek
+1 received by user: 12

Trusted

  # 990801 19-Feb-2014 22:11
Send private message

danielfaulknor: What I would do would be to use an EdgeRouter or a RouterBOARD or even an old computer as a router.

Give the WAN interface on your primary network, the LAN interface the DMZ details and then set a static route in your 2 wire to the WAN interface of the DMZ router, removing the double NAT in that bit.
You'll still have double NAT on the port forward side, but that's much less nasty than full double nat.
You just forward the port from the 2wire to the router and then from the router to the BBS host.

Then simply configure firewall rules to block all connection attempts to your main LAN, apart from traffic to/from the 2wire as required.


Thanks Daniel... some of that lost me but I will contact you off-line and see if we can work out a time to meet and discuss further.

Best, Paul




Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Dunedin selects Telensa to deliver smart street lighting for 15,000 LEDs
Posted 18-Jul-2019 10:21


Sprint announces a connected wallet card with built-in IoT support
Posted 18-Jul-2019 08:36


Educational tool developed at Otago makes international launch
Posted 17-Jul-2019 21:57


Symantec introduces cloud access security solution
Posted 17-Jul-2019 21:48


New Zealand government unveils new digital service to make business easier
Posted 16-Jul-2019 17:35


Scientists unveil image of quantum entanglement
Posted 13-Jul-2019 06:00


Hackers to be challenged at University of Waikato
Posted 12-Jul-2019 21:34


OPPO Reno Z now available in New Zealand
Posted 12-Jul-2019 21:28


Sony introduces WF-1000XM3 wireless headphones with noise cancellation
Posted 8-Jul-2019 16:56


Xero announces new smarter tools, push into the North American market
Posted 19-Jun-2019 17:20


New report by Unisys shows New Zealanders want action by social platform companies and police to monitor social media sites
Posted 19-Jun-2019 17:09


ASB adds Google Pay option to contactless payments
Posted 19-Jun-2019 17:05


New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35


Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39


TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.