AW: AW: [suse-security] Firewall

This is more complicated, but the "right way"

...

ipchains -P forward DENY ipchains -A forward -p all -j MASQ -s $ETH1NET/$ETH1NETMASK -d 0.0.0.0/0 You could have ommited -d 0.0.0.0/0 because this is default (same with -s .0.0.0.0/0 above)

I don't think, kurt would write his name below this ;-)

Maybe he woudn't. But it can be found on: http://securityportal.com/lasg/firewall/index.html Philipp PS: given the fact it's for learning ipchains, it's good enough.