Home server security

[cajzell]

Hello,

I have a server for my LAN at home where family members can write to our calendar, upload pictures to our gallery, and similar stuff. This is only for our computers at home, but I thought I might also make it possible to e.g. make it possible for a friend to see the gallery, or maybe alter the calendar when visiting someone (whose IP I know). I thought then I might redirect port 80 to the particular server on the NAT, use iptables to make a simple rule on the server where incoming traffic is only allowed for a few "friendly" IP's I know and I have a few questions related to that:

1. Is this advisable at all?

2. How should such an iptables rule look?

[adaptr]

1. If your apache config is reasonably secure, why not? Only about 60% of the world's websites run it
2. iptables -t nat -A PREROUTING -p tcp -i $EXT_IF -dport 80 -j REDIRECT --to $WEB_SERVER

Something like that, anyway; add specific -source addresses if you want to limit connections (although that is beter done on the INPUT chain.)
_________________
>>> emerge (3 of 7) mcse/70-293 to /
Essential tools: gentoolkit eix profuse screen