Playing with IPchains

[JF Martinez <jfm2@club-internet.fr>]

In order to protect ports from thge outside the recomended method in
Indy is to use Lokkit because it allows nearly trivial configuration
of packet filteruing so the conection coming from the Internet nver
reaches the daemon listeing in the port but will let pass connrections
coming from the LAN.

However Lokkit does not ensure masquearding and this done presently
with GFCC.  Howevert GFCC does not presently have good defaults for
what we want to do: a preset of masquerading rules who will not
interfere with Lokkit's filetering rules 

Is anyone willing to try to do it?

-- 
			Jean Francois Martinez

Project Independence: Linux for the Masses
http://www.independence.seul.org