Hi to all
I'm new in this forum

Recently I setupped my LAN to expose same services, such as transmission-daemon e zoneminder.

This two services is installe on two different PC (two xen VM really), on 10.0.0.0/24 lan.
The internet connection works with a modem/router and my internal lan is on 192.168.8.0/24
To connect the two lan I have installed a PC with two interface, and in it I have configured an apache instance to work as reverse proxy.

All is working fine.

But just a question:
How can to I allow a direct connection on a port of my torrent server behind the PC with two connections?

And, what do I do to improve the security of this last "firewall" PC?

Thank you

You can use iptable tool to open a service port to allow outside to access these two server.

Yes, this is the way, I knew...

But, for me, iptables is a bit complicate to use.
There is a solution like ipcop, or smoothwall, that work on a Xen domU?

These two distributions, ipcop and smoothwall, should support Xen CPU because they are x86.