Well after I finally get my firewall written on my Squid server and it's up and running smooth, my boss has instructed me to add a linux (RH8) firewall/router machine between the proxy and the internet.

I have tried to adapt the firewall from the squid server to the new machine but I failed miserably. I am here to beg for help.

My info:

$EXTINT="eth1"
$EXTIP="xx.xxx.xx.xxx" #(hidden for safety as it's static)
$INTINT="eth0"
$INTIP="192.168.20.1" #Internal ip of the router.
$RAPTOR="192.168.20.2" #The squid server

All this router machine has to do is the following:

1. Provide Internet/DNS access to the squid server.
2. Forward incoming connections on the following ports to the squid server: 25, 80, 1352, 5631, 5632
3. Act as a firewall against anything but that listed above.

Can someone give me the basic syntax to make this work. I have read alot of tutorials and I have a beautiful port forwarding firewall on the squid server, but for some reason when I use the same rules on the router, the squid server cannot access the internet and the ports don't get forwarded. Please help. Thanks..

ipchains or iptables? also, if you dont build, and understand the rules yourself .. how can you support it? and how will you know if it is secure? we cant do your homework on this one.

http://iptables-tutorial.frozentux.n...-tutorial.html