From mboxrd@z Thu Jan 1 00:00:00 1970 From: "thomas krause" Subject: Public Webserver behind IPtables Router Date: Fri, 18 Jul 2003 23:41:16 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <001c01c34d75$51848ea0$5001a8c0@linux> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0019_01C34D86.14B330B0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0019_01C34D86.14B330B0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello , i tried to set up an IPTables Router for my Webserver. All hosts = have has an official IP Adress. The eth0 of the Router is in a seperate = Net. The config on the Router is like this : ------------------------------- eth0 eth1 eth0 # Allow ssh ( 0.0.0.0/0 is replaced by my own client IP ) iptables -P INCOMING DROP iptables -A INCOMING -s 0.0.0.0/0 -p tcp --dport 22 -j ACCEPT iptables -P FORWARD DROP iptables -A FORWARD -s 0.0.0.0/0 -p tcp --dport 80 -j ACCEPT iptables -P OUTPUT ALLOW Will this work ? O.K. Iam a Newbie but i will learn ! MfG Thomas ------=_NextPart_000_0019_01C34D86.14B330B0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hello , i tried to set up an IPTables = Router for my=20 Webserver. All hosts have has an official IP Adress. The eth0 of the = Router is=20 in a seperate Net.
 
The config on the Router is like this=20 :
 
 
---------<Router>----------------------<WEBServer>
eth0          =     =20 eth1           &nb= sp;     =20 eth0
 
 
 
 
# Allow ssh ( 0.0.0.0/0 is replaced by = my own=20 client IP )
iptables -P INCOMING DROP
iptables -A INCOMING -s 0.0.0.0/0 -p = tcp --dport 22=20 -j ACCEPT
 
 
iptables -P FORWARD DROP
iptables -A FORWARD -s 0.0.0.0/0 -p tcp = --dport 80=20 -j ACCEPT
 
iptables -P OUTPUT ALLOW
 
 
Will this work ? O.K. Iam a Newbie but = i will learn=20 !
 
 
MfG Thomas
 
 
------=_NextPart_000_0019_01C34D86.14B330B0--