Re: How to build an good and secure firewall script?

Sasa Stupar <sasa@xxxxxxxxxxxxxxxxxxxx> · Tue, 16 Mar 2004 14:16:21 +0100

netfilter@xxxxxxxxx pravi:

Hi there,
after i postet some script idears (these are not my scripts) i want to
create my own and custom script for iptables.

So how to build my own and custom script?

I need the fallowing capatibilities:

VPN Redidirection to my Internal VPN Server (PPTP)

EDONKEY Redirection to my own Workstation

SMTP Accept on the Firewall Server

HTTP Redirection to my internal HTTP Server

Active FTP Transfer for internal Clients 
Ping from internal to outside nets but not from extern to intern

Maybe there exiting some tamplates where i can insert my custom rules?
And maybe there existing some rule tamplates, for vpn ... ?

I have installed the newest iptables version!

My Network Design looks like this:

internet <-> router <-> firewall <-> lokal net (192.168.1.0)
            |      |    |       |
         dyn IP    |    |       |
               10.0.0.1 |       |
                        |       |
                     10.0.0.2   |
                       (eth0)   |
                                |
                          192.168.1.221
                               (eth1)

Sorry, but i'm realy confused in building fw script, i tried some 
script from the internet, but all having errors in the syntax.

Thanx for any help and good idears.
Peter

 Try Firestarter. It's a GUI frontend for iptables. Very easy to 
configure. get it at http://firestarter.sourceforge.net

Sasa