I've got a DSL/Cable router box and for LAN IPs I like to use 10.4.4.*. I want ipchains to allow in on the LAN side telnet (or ssh, after I compile it) and ftp, and I want the Win98 system to be able to find the Linux system in Network Neighborhood. There's nothing I want to let in on the WAN side. What is needed to set this up?

What does ipchains do when chains conflict with each other? If I disallow everything from 10.* and 192.168.* for IP spoofing protection, and then allow a few things from within my LAN, which chain takes precedence?

Is it possible to get Win98 and Samba to do all of their file and print sharing in IPX instead of TCP/IP? This way ipchains (hopefully) won't need to allow any NetBIOS/NetBEUI ports from any IP.

Wow, thats a lot of questions.

OK, it is possible to see Linux in Network Neighborhood. Also it is possible to only let in NetBIOS and NetBUI in on the internal network. Second of all as far as I know IPX isn't supported with Samba. IPX is trouble anyway. Any major ipchains script will help you setup a secure firewall that will keep out NetBIOS over the internet.


Hope this helps.


***Your signature is StRaNgE