i am a newbie that has sucessfully implemented a rh8 box running firestarter as a firewall for my lan. i really like how it works, but i have a question.....i recently was a victim of a web server hack and would really like to put my web server behind the firewall and just pass the http info through it. my web server has 2 nics, 1 external and 1 internal. i thought all i had to do was us my rh8 internal ip as my gateway (at least that is what i have done for my internal client machines...) for my external nic on my web server, but that doesnt seem to do anything. how can i accomplish this?

thanks in advance......

If you're trying to use your linux box as a router for other machines with internal ip addresses (192.168.XXX.XXX or 10.XXX.XXX.XXX), you'll need to setup ip masquerading. Check out this thread, it should help you out. If you're not familiar with iptables, definitely check out the howto's first.

http://www.linuxquestions.org/questi...threadid=51835

If you just want to forward http traffic to your webserver, you need to setup ip forwarding by adding:

iptables -t nat -A PREROUTING -d xxx.xxx.xxx.xxx -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination yyy.yyy.yyy.yyy

Where xxx... is the address of your linux box and yyy... is the address of your internal webserver. Then add these to your filter table.

iptables -A FORWARD -i eth0 -o eth1 -p tcp -m tcp --dport 80 -m state --state NEW,RELATED -j ACCEPT

iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT

Smoothwall may be worth checking into.
Small footprint router/firewall that can run on an old PC. Lots of folks like it. I am about to give it a try myself.
Good Luck