Specifications

Requirements for Successful Implementation
First, check to see if your host boots using the configuration set up. Also see
if the selected services start and are available for use. Next, check to see if
the IP filter of the kernel is working as configured.
Booting the Firewall Host
1. Start the host then open the BIOS setup program. Check the settings
for the time and date. It needs to be set to GMT.
2. Configure the boot sequence so the host boots from the CD first — if
possible, only from the CD.
3. Assign a BIOS password to prevent, for instance, changes to the boot
sequence and to prevent the firewall from being booted from disk.
4. Save the BIOS configuration.
5. Insert the Live CD for Firewall.
6. Insert the configuration floppy.
7. Reboot the host.
8. Note any errors that appear when booting and revise the respec-
tive configuration files if necessary. If services do not start (message:
"hService xyz failedi"), the corresponding configuration file for the service
h<xyz>i contains an error. If this is the case, recreate the configuration
disk using the FAS tool on the Adminhost or revise the configuration
saved there and rewrite this to the configuration disk.
You should have already defined the configuration of the hard disk using
FAS, but if partitions 1 (swap) and 2 (var) of the firewall host do not corre-
spond to the settings in the /etc/live-setup.conf file, a dialog screen
appears. To reconfigure the hard disk, answer ‘Yes’.
Testing the Firewall
Before employing the firewall for daily use, testing should be done to ensure
the packet filter is configured correctly and the (configured) proxies all start
138 Requirements for Successful Implementation