Linux-Tip.net - The perfect start with Smoothwall Express 3.0

Linux-Tip News

We are proud to present Linux-Tip Europe. This page is designed to provide the Linux users community (not only in Europe) with news and articles that are of interest to them. It works by allowing members of the community to submit news and articles relating to Linux hardware and software. This same community can then decide what tips should be promoted based on what they consider to be the most important or interesting to the community by voting stories up and down. Stories that receive enough votes are promoted to the Linux-Tip Europe homepage.

Home

Workshops

Firewall/IDS

The perfect start with Smoothwall Express 3.0

Sunday, 09 September 2007

Article Index
The perfect start with Smoothwall Express 3.0
Smoothwall Post-Install Configuration
Configuring the Intrusion Detection System
Smoothwall Status Log Files and Updates

Page 2 of 4

Step 2: Smoothwall Post-install Configuration

If everything worked fine in step 1, you will see a login prompt in your console window. As mentioned before, Smoothwall is easy to configure by using a web based interface. Please use you favorite browser and login as “admin”. Use the password you’ve created in step 1.
The URL should look like this:

https://IP-Smoothwall_internal_interface Port 441

In our workshop we’ll use :

https://192.168.10.99:441

After a successfully login, you will see the following screen:

Please take your time to explore the different menus and possible setups. Take a look to the nice network graphs and monitoring tools but also to the log and maintenance possibilities.

You should double check the network configuration first by clicking on “Network – Interfaces”:

Smoothwall comes preconfigured after the setup. By clicking on “Networking – Outgoing”, you will see the default settings. You can delete all rules for the “PURPLE” interface, because we are not using a wireless device in our workshop. Add the a new exception like in the screen below. Add a new “Application or service” and choose “Infrastructure”. This will add DNS functionality and it makes you able to browse the Internet from your internal network.

Enable the HTTP Proxy by clicking on “Services – Web Proxy” and “Transparent” – “Enabled” like in the picture below. Do not forget to save the settings.

You should now be able to browse the Internet without changing the proxy settings on your browsers in the internal network.

This is a nice opportunity the check the log files using the web interface. Please click on “Logs – webproxy”. You should now see the log entries like this: