How to build an good and secure firewall script?

How to build an good and secure firewall script?

[netfilter]

Hi there,
after i postet some script idears (these are not my scripts) i want to
create my own and custom script for iptables.

So how to build my own and custom script?

I need the fallowing capatibilities:
VPN Redidirection to my Internal VPN Server (PPTP)
EDONKEY Redirection to my own Workstation
SMTP Accept on the Firewall Server
HTTP Redirection to my internal HTTP Server
Active FTP Transfer for internal Clients 
Ping from internal to outside nets but not from extern to intern

Maybe there exiting some tamplates where i can insert my custom rules?
And maybe there existing some rule tamplates, for vpn ... ?

I have installed the newest iptables version!

My Network Design looks like this:

internet <-> router <-> firewall <-> lokal net (192.168.1.0)
            |      |    |       |
         dyn IP    |    |       |
               10.0.0.1 |       |
                        |       |
                     10.0.0.2   |
                       (eth0)   |
                                |
                          192.168.1.221
                               (eth1)

Sorry, but i'm realy confused in building fw script, i tried some 
script from the internet, but all having errors in the syntax.

Thanx for any help and good idears.
Peter

Re: How to build an good and secure firewall script?

[Sasa Stupar]

netfilter@sbgit.com pravi:

> Hi there,
> after i postet some script idears (these are not my scripts) i want to
> create my own and custom script for iptables.
> 
> So how to build my own and custom script?
> 
> I need the fallowing capatibilities:
> VPN Redidirection to my Internal VPN Server (PPTP)
> EDONKEY Redirection to my own Workstation
> SMTP Accept on the Firewall Server
> HTTP Redirection to my internal HTTP Server
> Active FTP Transfer for internal Clients 
> Ping from internal to outside nets but not from extern to intern
> 
> Maybe there exiting some tamplates where i can insert my custom rules?
> And maybe there existing some rule tamplates, for vpn ... ?
> 
> I have installed the newest iptables version!
> 
> My Network Design looks like this:
> 
> internet <-> router <-> firewall <-> lokal net (192.168.1.0)
>             |      |    |       |
>          dyn IP    |    |       |
>                10.0.0.1 |       |
>                         |       |
>                      10.0.0.2   |
>                        (eth0)   |
>                                 |
>                           192.168.1.221
>                                (eth1)
> 
> Sorry, but i'm realy confused in building fw script, i tried some 
> script from the internet, but all having errors in the syntax.
> 
> Thanx for any help and good idears.
> Peter
> 
> 
> 
  Try Firestarter. It's a GUI frontend for iptables. Very easy to 
configure. get it at http://firestarter.sourceforge.net

Sasa