Firewall for web server

[robotdave]

Hi

I have a Linux web server, but I only want a few registered IP address to have access to it. The data on this server will be highly sensitive.

Because of this I want to put the server behind a firewall, but I'm not sure exactly how to do this.

I have experience of using NAT with a Cisco506e but is there a way I can redirect traffic through a PIX to a specific IP address. I'm not even sure I know what I mean.

Any help will be greatly appreciated.

By the way I have several reserved public IP address for this.

 

[neutec]

Sure,
If you use nat you just will need to set up a static route.
Let say your firewalls ip address was 1.1.1.1 amd you web servers ip was 192.168.100.1 you woould use this command

ip nat inside source static tcp 192.168.100.1 80 1.1.1.1 80

This would allow traffic to your web server and only exposing port 80.

you will also need to set up nat to make this work( i.e. nat pool and access-list rules.

 

[robotdave]

Hey, thanks a lot )