<html><DIV>
<P><BR>Ben,</P>
<P>This is an initial firewall script I use to check out any new system (firewall) I put together</P>
<P>---------------------------------------------------------</P>
<P>echo 1 > /proc/sys/net/ipv4/ip_forward</P>
<P># remove any existing forwarding rules to be safe<BR>/sbin/ipchains -F forward</P>
<P># set the default forwarding policy to deny<BR>/sbin/ipchains -P forward DENY</P>
<P># turn on IP masquerading for outgoing packets<BR>/sbin/ipchains -A forward -j MASQ -s 192.168.2.0/24 -d 0.0.0.0/0</P>
<P># stop NetBIOS broadcast packets from causing an autodail<BR>/sbin/ipchains -A forward -j DENY -p tcp -s 0.0.0.0/0 137:139<BR>/sbin/ipchains -A forward -j DENY -p udp -s 0.0.0.0/0 137:139</P>
<P># load some proxy modules into the kernal<BR>MODULES = `ftp irc raudio`<BR>for SERVICE in $MODULES; do<BR> /sbin/insmod ip_masq_$SERVICE<BR>done<BR></P>
<P>--------------------------------------------------------</P>
<P> </P>
<P>hope this helps</P>
<P>erick<BR></P></DIV><br clear=all><hr>Get your FREE download of MSN Explorer at <a href="http://explorer.msn.com">http://explorer.msn.com</a><br></p></html>