configuring LAN + DMZ through IPTables with an ADSL Connection.
 

hi all
I'm trying to build a firewall in debian 3.1 using IP Tables. I am currently using Endian Firewall Community edition and it works great but i wish to learn more about iptables and theres no way of learning something quite like doing it yourself.

i've never used IP tables before so all the lingo of chains and tables isn't making much sense.

here is my network structure.

>>>>>>>>>>DMZ
^
Net>>>>Firewall>>>>>LAN

the firewall will be configured as follows.
eth0 > ADSL connection
eth1 > LAN
eth2 > DMZ

if someone would be able to point me in the right direction to some good documentation or if its simple enough to show me what to do that would be great. I host my own website and email server so all i wish to do is allow a few ports in and most of them out. not allowing anything into the LAN network at all.

if this is something rather simple please kick me in the backside for not knowing this already.

thanks alot.
Braytac

PS sorry if the formatting of my diagram above comes out looking odd. it looked correct when i wrote the post.

Hi,

Please find the below link for good documentation.

http://www.iptablesrocks.org/


Thanks & Regards

jaz_comp

Check out this page. http://www.linuxguruz.com/iptables/
There are some scripts and the one that multi-homed should be what you are after. Use it myself for a start with 5 nic setup. Currently only using 4. The fourth is the wireless side. 5th was for second channel internet bonding. Never got it quite right yet.

If you mean ipchains and iptables. They are two completely seperate packet filtering tools. iptables is used on newer 2.4 and current 2.6 kernels. ipchains was in maybe early 2.4 and 2.2 kernels. ipfrwd I think was in 2.0 kernels.

Brian

I found this quite instructve:

http://iptables-tutorial.frozentux.n...-tutorial.html

as it explains a lot of the basics.