one interface, basic setup
wpmccormick at sbcglobal.net
Fri Jul 22 05:28:27 CEST 2005
> Bill McCormick wrote:
>> (basic and packet filtering) I still feel unsure. I want to build a
>> FW for outgoing packets only. My setup looks like this:
>> internet <---->Netgear FVS318 <----> LAN
> I think I'd set up a different logical segment for the clients, such
> that they could not reach the router at all. Just one more hurdle for
> any would-be "extruder" trying to get out.
This a home setup. First and formost, I want to restrict, limit and
control what clients can send out and to where. Basically, I just want
ALL out-bound traffic to pass through FC3 iptables then get routed to
So, the best (easiest) way to accomplish this is to make the FC3 the
gateway router by adding another interface? Do the NAT rules get crazy
for that? Are the routing tables complicated?
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.323 / Virus Database: 267.9.2/53 - Release Date: 7/20/2005
More information about the netfilter