Linux Firewall as Wireless Access Point
trlists at clayst.com
trlists at clayst.com
Sun Feb 6 14:20:28 EST 2005
I currently have a home / office TCP/IP network with an 8-port switch
at the center. One port connects to my firewall -- an old Dell machine
running Slackware with iptables. The second NIC on that machine goes
to the cable modem.
I have been contemplating adding wireless to the network. I was
looking at wireless access points the other day -- they seem to be more
expensive than the wireless broadband routers! Then I realized maybe I
could just use the firewall as the WAP, by adding a third (wireless)
NIC on the firewall and constructing the iptables rules properly.
Is a commercial WAP or wireless router offering something that I would
need and could not get with this setup? I see that iptables can do MAC
filtering, and I think I could get the needed encryption just by making
the appropriate WEP settings. If that's right, all I have to do is see
if the firewall location (in the basement) is workable for signal
pickup throughout the house.
Anyone see a problem with this? Anybody done it? Are there Linux
drivers for most (or at least some) wireless NICs that will allow me to
set the keys etc.?
Also, are there security concerns with this approach that don't exist
if the WAP is a separate device on its own port off the switch? I can
see the topology is different but I'm not sure if there's any logical
difference security-wise -- it seems like the presence (or absence) of
the switch between the firewall and the wireless device really
shouldn't matter. On the other hand I'd have to route inbound traffic
on the wireless NIC back out to the internal network, and vice versa,
which is a new set of rules and a new function for the firewall, so one
can't assume it's free of vulnerabilities.
Thanks for any tips,
--
Tom
More information about the Discuss
mailing list