Ipchains getting started

"Marci Wilken" <[email protected]> Tue, 29 Apr 2003 16:27:54 -0700
Newsgroups gmane.linux.redhat.release.seawolf
Organization Beacon Heights Software
Message-ID <[email protected]>
I am just getting started with linux IPchains and I could use some basic 
information.  I have read all the howtos that I can find but I have a 
question as it relates to my network.  I am running a local network of 
win and os2 machines.  I have a Linux internet server that will host my 
web site.  I am connected to the internet thru a dsl modem  

The network is setup as follows
network workstations 185.68.1.2/24
Server network card 185.68.1.1
Internet network card  198.14.14.1
Internet gateway 198.14.14.12

I want to connect the system so that the network stations can access the 
internet  so this is what I came up with the command

ipchains -A OUTPUT -p tcp -s 185.68.1.2/24 www -j ACCEPT
ipchains -A INPUT -p tcp -d 185.68.1.2/24  www - j ACCEPT

1. am I using the correct source and destination values or should I use 
the IP for the server nic. 185.68.1.1

2. if I am setting input filtering up on the Internet side of the card 
should I use the Nic card address or the gateway address. ie

ipchains - A INPUT  -p tcp -s 198.14.14.12 ftp -j REJECT -l
(Block ftp connection from the internet to the server and then logs them)


3. should I have a proxy server setup first?

4. Has anyone setup a system like above so that I can run everquest from 
a network machine.

Help Always Appreciated

MJ Wilken