| Obviously, I am too stupid to get the difference between -F, -I and -O straight. So here I am, looking for enlightenment.
Consider this:
You have a network at home, with 10.0.0.0/24 addresses. There is one Linux box which acts as ISDN dialup, masquerading router AND firewall. Throw the tomatoes already, but I simply don't have the hardware to put a firewall between router and me. This means the outgoing interface has a dynamic IP.
Which rules do I have to supply to ipfwadm to make the box
- accept incoming connections from all machines on the private network
- forward and masquerade all connections from local net to internet
- block all incoming transmissions from outer space
?
To be honest, I expect the answer to be "This is not gonna happen with your network layout, buy another machine." But hey, this is Linux, and I believe in Linux ;-)
Thanks in advance,
Thurog |
