Hello

I am a networking admin of a network running a mac osx server Running the Darwin 9.8.0 kernel. My goal is to get a firewall computer running ubuntu with the program IQfirewall. My networking hardware goes ( __ cat 5 cables)

*internet* _____DS1___ cisco router_____ a small switching hub___OSX server___a ProCurve switch ___ a cat 5 box____ routers ___ computers.

from what i have read I want the server to act like a gatway/firewall and sort of have the server forward packets to the OSX server.

How would I get started. IQfirewall uses a GUI interface and I can later copy my rules if you would want to see them. it is based off of iptables

You would put the firewall between the router and the hub and it will need two NICs in it. One nic will be configured with the outside interface and the other NIC with the inside interface, all traffic will get routed through it. I'm personally not fond if IQFirewall and would suggest you look into something a bit more robust like m0n0wall or shorewall.

I second the not found of IQFirewall. I have used shorewall, infact still do in one remote location, but have become much more fond of PFSense which is based on FreeBSD and allows for Multiple WAN interfaces as well as Multiple LAN interfaces.

OK so if you suggest it I will drop IQfirewall...I really did not try it out anyway. I have heard of m0n0wall. so lets say I go with shorewall. Will that auto forward the packets after setup or will I have to configure it to. I tested out ipfire but did not like it very much.
would it be setup the same where you have green interface and a red interface. The computer has a built in network port in the motherboard and a NIC. would I have to bridge the connection or something.... sorry if I come off as a noob. I am a high school student running a high school network so all this is very new within the past year. thought I have read a few networking books and want to enter the field after school...I am very new to firewalls.

Might consider also other distros such as untangle or other firewalling OS's as noted above.