On Sat, 2004-05-29 at 20:53, Kevin F. Berrien wrote: > I'm intersted in building a bastion firewall for the following > sistuation. Have a closed network (police dept). There are no crosses > to the internet. However, we'd like VERY LIMITED access by the Windows > DC server for the following: Windows update (via SUS), Symantec AV > updates, VNC/or remote desktop connection to 1 or 2 workstations on our WAN. > > Thus, I want to limit all traffic except various protocols/ports between > specific IP's/URL's. > > Certianly FC and iptables can do this, does anyone recommend a > configuration utility, start off scripts, etc? Should I be looking > more into LRP (now defunct), etc? My iptables knowledge is not great > (did it years ago), so some configuration utility would be great, and my > co-workers isn't experienced in this area at all. There are several scripts (check on freshmeat.net) that allow you to switch on your machine, run the script, do every thing you would normally do, shut down the script, and it would create a set of firewall rules that you would need to allow you to do what you had just done. This is not an end solution as others have stated, however it may give you some where else to start from, so that you can get things running. Just a thought. dougie
