Rant on iptables

I was just examining the iptables setup on my desktop,
and trying to read up on the subject,
and I was shocked at the enormous scrolls I had to wade through
to get any sensible information at all.

Basically, it seems to me that 99% of Linux users
fall into half-a-dozen categories,
so all that is really necessary is half-a-dozen sample config files.

In my case, for example, I have a desktop
linked by ADSL/pppoe (DHCP) to the internet,
and two local LANs, based on ethernet and WiFi.
Where can I find a sample script,
in which I just have to enter the correct IP addresses?


--
Timothy Murphy
e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

On Sat, 02 Oct 2004 14:42:55 +0100, Timothy Murphy wrote:

> I was just examining the iptables setup on my desktop, and trying to read
> up on the subject, and I was shocked at the enormous scrolls I had to wade
> through to get any sensible information at all.
>
> Basically, it seems to me that 99% of Linux users fall into half-a-dozen
> categories,
> so all that is really necessary is half-a-dozen sample config files.
>
> In my case, for example, I have a desktop linked by ADSL/pppoe (DHCP) to
> the internet, and two local LANs, based on ethernet and WiFi. Where can I
> find a sample script,
> in which I just have to enter the correct IP addresses?

There is no need for half a dozen sample configs, merely a high level
configuration tool that does the grunt work for you.

http://www.shorewall.net/

In paticular, your setup seems near identical to this:

http://www.shorewall.net/three-interface.htm

--
BOFH Excuse #80:

That's a great computer you have there; have you considered how it would work as a BSD machine?