Ok, I've searched for days, maybe you can point me in the right direction.
I have an MPLS scenario with a shared gateway in a multi-domain M$FT AD environment. On the inside of the MPLS all of the doors are open.
I'd like to put an Ubuntu box in between my carrier managed router and my domain within the AD Forest.
I'd like the purpose of this box to be for packet inspection, monitoring traffic inbound and outbound, IPS/IDS alerting (if possible), etc. If there's something fishy going on, I'd like to be able to intervene. I'd also like to keep AD replication, sharing, resource access, emails, etc., all going smoothly.
I'm not looking to serve DNS or DHCP...I don't want NAT. I basically want this to take packets from one end, spit them out on the other, maintaining state, etc., I just want some visibility and, if needed, some control.
Has this been accomplished? Documented? Ideas &/| Thoughts?
