From mboxrd@z Thu Jan  1 00:00:00 1970
From: Sasa Stupar <sasa@stupar.homelinux.net>
Subject: Re: How to build an good and secure firewall script?
Date: Tue, 16 Mar 2004 14:16:21 +0100
Sender: netfilter-admin@lists.netfilter.org
Message-ID: <4056FE25.3030701@stupar.homelinux.net>
References: <DIIE.0000011900002AC1@sbgit.com>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-admin@lists.netfilter.org>
In-Reply-To: <DIIE.0000011900002AC1@sbgit.com>
Errors-To: netfilter-admin@lists.netfilter.org
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: <https://lists.netfilter.org/pipermail/netfilter/>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
To: Netfilter-List <netfilter@lists.netfilter.org>

netfilter@sbgit.com pravi:

> Hi there,
> after i postet some script idears (these are not my scripts) i want to
> create my own and custom script for iptables.
> 
> So how to build my own and custom script?
> 
> I need the fallowing capatibilities:
> VPN Redidirection to my Internal VPN Server (PPTP)
> EDONKEY Redirection to my own Workstation
> SMTP Accept on the Firewall Server
> HTTP Redirection to my internal HTTP Server
> Active FTP Transfer for internal Clients 
> Ping from internal to outside nets but not from extern to intern
> 
> Maybe there exiting some tamplates where i can insert my custom rules?
> And maybe there existing some rule tamplates, for vpn ... ?
> 
> I have installed the newest iptables version!
> 
> My Network Design looks like this:
> 
> internet <-> router <-> firewall <-> lokal net (192.168.1.0)
>             |      |    |       |
>          dyn IP    |    |       |
>                10.0.0.1 |       |
>                         |       |
>                      10.0.0.2   |
>                        (eth0)   |
>                                 |
>                           192.168.1.221
>                                (eth1)
> 
> Sorry, but i'm realy confused in building fw script, i tried some 
> script from the internet, but all having errors in the syntax.
> 
> Thanx for any help and good idears.
> Peter
> 
> 
> 
  Try Firestarter. It's a GUI frontend for iptables. Very easy to 
configure. get it at http://firestarter.sourceforge.net

Sasa