+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
*nix Thread, Replacing ISA server with a linux based system in Technical; We currently have a proxy server set up (ISA 2006) which does all the usual proxying and caching fun. The ...
  1. #1

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,302
    Thank Post
    523
    Thanked 2,593 Times in 2,012 Posts
    Blog Entries
    24
    Rep Power
    887

    Replacing ISA server with a linux based system

    We currently have a proxy server set up (ISA 2006) which does all the usual proxying and caching fun. The server also has an external IP address which is actually on our net router (the router receives data to it and NAT forwards it to the internal IP of the ISA box).

    This box also makes use of the firewall functions to prevent internal access to bits and pieces which shouldn't be accessed and also forwards various ports to other places.

    Now, I know how to go about setting up a squid proxy, my question is - do I want to go into the nitty gritty of iptables for the firewall side of things or should I stick to a nice front end like shorewall?

    This way we manage to cut our MS Tax a little more.

    Cheers
    Tony

  2. #2

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,417
    Thank Post
    644
    Thanked 965 Times in 665 Posts
    Blog Entries
    2
    Rep Power
    328

    Re: Replacing ISA server with a linux based system

    You might like something that comes pre-packaged as a firewall and proxy, perhaps IPCop with AdvProxy and URLFilter addons.

  3. #3

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,302
    Thank Post
    523
    Thanked 2,593 Times in 2,012 Posts
    Blog Entries
    24
    Rep Power
    887

    Re: Replacing ISA server with a linux based system

    My only problem with that is I keep on hearing that 'it is slow' - in reference to a variety of them. Also, does IPCop not require you to have 2 network cards - one for an internal (green) and one for an external (red) interface which need to be on different subnets?

  4. #4

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,417
    Thank Post
    644
    Thanked 965 Times in 665 Posts
    Blog Entries
    2
    Rep Power
    328

    Re: Replacing ISA server with a linux based system

    Ours does have it set up like that as it is our default gateway and NAT, and I don't actually know if it can run with just one interface.

  5. #5


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339

    Re: Replacing ISA server with a linux based system

    shorewall is a nice(ish) non graphical front for managing iptables.
    http://www.shorewall.net/

  6. #6
    contink's Avatar
    Join Date
    Jul 2006
    Location
    South Yorkshire
    Posts
    3,791
    Thank Post
    303
    Thanked 327 Times in 233 Posts
    Rep Power
    119

    Re: Replacing ISA server with a linux based system

    I'm in the same boat in one of my schools (a primary with 26 machines) with ISA being a constant thorn in my side (admittedly I don't know how to configure it properly).

    I'd prefer to shift all the proxy, security and filtering across to a smoothie or similar box but in this instance would a HomeBrew Smoothie (with Dans Guardian and proxy enabled) be sufficient or advisable?


    Note: I'm looking at the Extended Defence + Homebrew version of Smoothie in case anyone is after specifics.

  7. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Replacing ISA server with a linux based system

    I don't see why that wouldn't work contink.

  8. #8
    contink's Avatar
    Join Date
    Jul 2006
    Location
    South Yorkshire
    Posts
    3,791
    Thank Post
    303
    Thanked 327 Times in 233 Posts
    Rep Power
    119

    Re: Replacing ISA server with a linux based system

    Quote Originally Posted by Geoff
    I don't see why that wouldn't work contink.
    Ok... I guess I'll run some testing using the staff machine.. At least then someone gets net access that works :P

  9. #9


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,487
    Thank Post
    867
    Thanked 855 Times in 675 Posts
    Rep Power
    197

    Re: Replacing ISA server with a linux based system

    Given our experience with open source components, I can confidently state that your linux-based solution does not necessarily have to be slow!

    WRT 2 NICs, our "corporate guardian" is the only 1-NIC out-of-the-box that I know of, though rolling your own version with DG would be well within the bounds of possibility.

  10. #10

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,302
    Thank Post
    523
    Thanked 2,593 Times in 2,012 Posts
    Blog Entries
    24
    Rep Power
    887

    Re: Replacing ISA server with a linux based system

    Right, as I don't want to mess around with the IP address settings I am going to go with a home rolled Ubuntu Server + Squid + Dansguardian + Shorewall solution.

    Now to build and test it in a VM.

  11. #11

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,608
    Thank Post
    745
    Thanked 1,706 Times in 1,519 Posts
    Rep Power
    437

    Re: Replacing ISA server with a linux based system

    My only problem with that is I keep on hearing that 'it is slow'
    Anyone saying that with out backing it up is just talking nonsense.

    Ben

  12. #12

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,302
    Thank Post
    523
    Thanked 2,593 Times in 2,012 Posts
    Blog Entries
    24
    Rep Power
    887

    Re: Replacing ISA server with a linux based system

    Indeed, I now have a set up as mentioned above (although I need to play with the shorewall rules) that runs significantly faster than our ISA server - and it is running in a vm.

    Now just to customise

  13. #13
    contink's Avatar
    Join Date
    Jul 2006
    Location
    South Yorkshire
    Posts
    3,791
    Thank Post
    303
    Thanked 327 Times in 233 Posts
    Rep Power
    119

    Re: Replacing ISA server with a linux based system

    Quote Originally Posted by localzuk
    Right, as I don't want to mess around with the IP address settings I am going to go with a home rolled Ubuntu Server + Squid + Dansguardian + Shorewall solution.
    I think the only reason I'm not tempted to go with a home rolled system is that I don't want to be dealing with the grief of a kernel upgrade when something like smoothie does it all for me.

    Ack... that sounds so lazy doesn't it... I think it's just that I have enough to learn about firewall rules, etc.. let alone relearn all my nix stuff. ops:

  14. #14

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,882
    Thank Post
    25
    Thanked 93 Times in 73 Posts
    Rep Power
    51

    Re: Replacing ISA server with a linux based system

    I just upgraded to SchoolGuardian 5 which has a lovely real time monitor now which auto refreshes every 5 seconds or so. Its very useful.

    Celeron 2Ghz with a gig of ram and it flies.

    You have to pay for it though but everything is automatic and the upgrades always work.

  15. #15

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Replacing ISA server with a linux based system

    Quote Originally Posted by Simcfc73
    I just upgraded to SchoolGuardian 5 Celeron 2Ghz with a gig of ram and it flies. Proper rackmounted job or 'converted' desktop PC?



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replacing network cards in ISA server
    By mullet_man in forum Windows
    Replies: 2
    Last Post: 6th August 2007, 08:01 PM
  2. Web Based Ordering System
    By mmoseley in forum Web Development
    Replies: 2
    Last Post: 27th May 2007, 03:50 PM
  3. Adding/Replacing a Drive in Server
    By SimpleSi in forum Windows
    Replies: 12
    Last Post: 29th December 2006, 04:23 PM
  4. OpenFilter - Linux based SAN distro.
    By Geoff in forum *nix
    Replies: 4
    Last Post: 24th September 2006, 09:47 PM
  5. Replies: 3
    Last Post: 13th September 2006, 09:36 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •