The essential settings to start the FwGuardian script:

We assume that the Internet Router is connected to eth1 and local network at the eth0 and administrators hosts are 10.0.0.1 and 10.0.0.2. To start Web Server set "yes" in webserver option. We demonstrate NAT support for ftp and sip protocols, but you can select all supported protocols setting ALL. Identify the firewall interfaces (LAN and WAN) and the TRUST hosts. The captive portal function is allowed only if the option "route_auth" is set to yes.

      vim /opt/fw4.2/fwguardian.conf
              forwarding yes
              net_sharing yes
              ...
              IFWAN eth1
              IFLAN eth0
              ...
              TRUST 10.0.0.1 10.0.0.2
              webserver yes
              route_auth no
              ...
              conntrack ftp sip

      vim /opt/fw4.2/webauth/webauth.conf
                bind.http   0.0.0.0:81
                bind.https  0.0.0.0:8443
                ...
                adm_user    webadmin
                ...
                adm_addr    10.0.0.1
                adm_addr    10.0.0.2
last next
Current version: 4.2.5 (Pre 4.3)                                Developed by Humberto L Jucá betolj@gmail.com
FWGuardian Authenticated Area Access
Web server based in Horatio Project