Install notes for SmoothWall Version 0.9.1 (03/09/00)
By Lawrence Manning (lawrence@aslak.demon.co.uk)
and Jon Fautley (jon@filbert-da-frog.co.uk)

Remember to check our sourceforge site for updates!
(sourceforge.net/projects/smoothwall/)

BETA BETA BETA BETA BETA BETA BETA BETA BETA BETA BETA BETA BETA BETA BETA 

This is a temporary document, giving people who are interested in looking at
SmoothWall a taster for how to install it.

Please refer to the Fixes section, to see what's been fixed.  It's at the bottom
of this file  

WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING

This is a complete (if very small) linux distribution and if you install it, it
will reformat your harddisk!!!!!  Do not under any circumstances run the
installer on a machine you have data you wish to keep on!

This file describes how to install v0.9 of SmoothWall.

Requirements
------------

386 with 8meg.  Lowest spec so far tested is a 486DX4 with 32meg.  Should
easily run on a DX2 with 8meg. Any 2.2.16 suppored network card.  Modem on
ttyS0 or ttyS1.  80meg of IDE harddisk.  An IDE CDROM.  Alternativly, the common
"old style" CDROM interfaces are supported, such as the SoundBlaster ones.  Only
the SB16 driver has been tested, but the others should all work.  You will
probably need to supply IO/IRQ information!

Files
-----

smoothwall-cdrom-0.9.1.gz is a ISO image of the installation CDROM.  Inside are
images for the boot floppy, and the network driver floppy.  You will need to
create (with dd) disk1 if your machine does not boot from floppy.  Likewise,
if you want to do a network install, you will need to write out the disk2
image.

smoothwall-install-0.9.1.tar.gz is the source code to the install program. It
uses a simple Makefile. smoothwall-cgi-0.9-1.tar.gz is the basic SmoothWall cgi
files. They are tarred up relative to root.

Installing
----------

Boot the cdrom or the disk1 floppy. Choose whether you are installing from
CDROM or network. If installing from CDROM, put the CD in the drive, and
continue. If installing from the network, see below.

The harddisk will be repartitioned and filesystems created.

Next you will have to setup the network.  Give the driver name, such as ne,
ne2k-pci etc.  This is lame :( I will add auto-detecting later.  Give  the
IP address information.

Next, the files should be installed (untarred).  For network installs, give a
URL to the smoothwall.tgz file.  Then you will have to give a root and 
SmoothWall admin password.  Then you can reboot the SmoothWall, and point your
webbrowser at:

http://machine/

And configure.... Good Luck!  Remember: To IP masquarade through SmoothWall, you
should set each desktop's default gateway to the SmoothWall machine, and set
the DNS to the IPS's DNS servers.

Yes, there is alot to do!

Installing over the network:
----------------------------

For this to work, you will need loopback-fs support in your kernel. For help
with recompiling your kernel, see the Kernel-HOWTO.

A. Setup the loopback FS and point it at the ISO image on your harddrive:

root# losetup /dev/loop0 smoothwall-cdrom-0.9
mount /dev/loop0 /cdrom

B. Copy the file to your webserver: 
cp /cdrom/smoothwall.tgz /home/httpd/html

Then your all set for a network install! Good Luck...

Bugs
----

Currently, insufficient checking for shell backticking etc. characters in 
fields before pppd is called. Will be fixed in next release.


Fixes
-----

The following fixes and improvements are relative to 0.9:

/etc/securetty ammended so root can login from the local network.

ipcahins based firewall has been added. Everything is disallowed except that
which is permitted. TCP and UDP packets to the low ports on ppp0 is disallowed.
Spoofing attempts are blocked. A webpage is available for viewing the firewall
log on a day by day basis.

Another page lets you view the ppp log, in order to make it easier to see why
the connection failed etc.

The cdrom is now bootable.

CHAP and PAP have been murged and pppd is left to determine how the peer wants
it to authenticated.

Max retries is given a default setting of 1.

The Dial and Hangup buttons are not avaiable until ppp has been set up.

The front page has been spruced up abit.

The dial buttons now requires either admin access, or a password for the
"dial" user.

Removed some stray .a stub library files.

Added COM3 and COM4 support

Included VI for all you VI hacks.

Passwords are blanked in the install program.

Yet another new page lets you view basic system information: memory usage, 
w command, and interfaces.

Added quotes for ethernet DRIVER for drivers that need parameters (oops, this
stuffed up the shell variable in the rc.network script)

Fixed some speeling errors.
