As mentioned in my previous weblog I decided to install shorewall on $server.

I configured my interface file for one interface only since I disabled one of the nic's in this box.
The rules file was setup specially to distinguish between services which are allowed from LAN and these which are allowed from internet as well.
It's quite nice and you can easily setup things like this with shorewall. I like it!


./sabin -s