iptables firewalls, thoughts, advises... -> icewall <-

[m3thos]

Well, I've made a iptables based firewall for a NAT box, some time ago.. but I keep revising it and trying to improve it everytime...

So, I though about sharing it with you guys, so you could criticize it, give some advises, in some general way.. I thing that putting it here for "review" of a larger number of computer/linux/ users would expose some bugs, flaws, and maybe some good ideias that should be kept.

anyaway, for everyone, and for any kind of use .. here it is:

http://mega.ist.utl.pt/~mmsf/configs/icewall

Thanks in advance!
_________________
Miguel Sousa Filipe
handle: m3thos
More human than human

[rett]

What I did for our hospital is set up webmin for the configuration. I use the shorewall configuration which uses iptables but makes life much simpler my making it a bit more abstract.

emerge webmin and connect to port 10000 with your web browser. You'll then want to set webmin to use SSL for security and you're set.

All you'll need to do then is create a new webmin user and only show the modules you specifically use for your firewall management such as shorewall, iptables firewall, dhcpd, bind, net configuration, ppp dialin/dialout, pptp vpn, ssh, squid, time, server status, etc.

It works great for me!