Hello All,
I have just changed my server setup at home. I have a linux server serving out http, ftp, and a couple of other things through my cable modem. Previously, I connected through a Linksys router and forwarded the nessecary ports to the linux machine, and it worked fine.
Having some recent troubles with the Linksys crashing, I decided to shove an extra NIC into the linux machine and do IP Masquerade NAT through iptables. NAT through my network works fine. What I am trying to do is accomplish some basic firewalling without distrupting NAT connections.
eth0 is the internal network interface.
eth1 is the internet connected interface.
What I want to do is DROP any connections to my box on eth1 that are not going to ports I want to be accessible on eth1, but I want to ACCEPT connections to a specified set of TCP ports on eth1.
How would I go about this? |
