I was wondering is someone could direct me to a good iptables script for corporations. I need internet access for our lan users using http, https, ftp, and possibly socks; be able to receive internet mail into postfix so that users can access their mailboxes from windows (outlook) and also send mail out through Posfix to the internet using smtp. I have a website using Apache running on port 80. A couple of users have Aol accounts which uses port 5190.

I have a static ip address on eth0 and class C on eth1 (with static ip addresses for lan pc's). I guess these are the ports I need:

http: 3128
https: 443
ftp: 21 ?
socks: 1080
Aol: 5190
Apache: 80
newsgroups: 119
Postfix: 110 - not sure
smtp: 25
samba: 137 & 139

Any help with a good iptable to handle this or something to get me going in the right direction would be appreciated.

Thanks,

Dave

I'll dump the linklist here, you'll be able to sort it out from there I guess, if not, post where you got stuck:

Netfilter+Iptables HOWTO:
LQ search: iptables+howto,
IPTables Tutorial,
IPSysctl Tutorial,
Linuxguruz.org,
Netfilter.org Packetfiltering HOWTO,
Linuxsecurity.com Iptables tutorial,
Andreasson's Iptables tutorial,
Iptables Connection tracking.
Taking care of the New-not-SYN vulnerability.

Other resources/misc stuff:
CERT: Home Network Security,
Firewall FAQ,
Assigned ports > 1024,
Port designations,
FAQ: Firewall Forensics (What am I seeing?),
Linux Firewall and Security Site,
Auditing Your Firewall Setup (old, still usefull),
TLDP: Firewall Piercing mini-HOWTO"],
Something called the "Home PC Firewall Guide",
Vendor/Ethernet MAC Address Lookup,
Netfilter Iptabes/Ipchains Log Format,
Dshield (find out if IP was marked as used in attacks),
(Snort) Port search,
Neohapsis Port search,
(IPMasq) P2P ports,
Infosyssec's Firewall Security and the Internet (badly updated site),
Is "Stealth" important?.