ipchains with DMZ

[Trekkie]

Hi,

I have RH 7.2 with ipchain installed with 3 nic's. I have the firewall working fine, with all the ports closed.

I want to use the third nic as a dmz in my firewall so that port 21 is open to my server (in the dmz). How do I configure it, so it allows only the port 21 to be open to my dmz without exposing the rest of the network. I want port 21 open to any IP address in the Internet.



eth0: Internet (ie dhcp)
eth1: Good/safe area (ie. 192.168.3.1)
eth2: DMZ (ie. 172.16.2.1)

I appreciate any advice

 

[justice41]

It would be a Good Idea(TM) to read the entire HOWTO on this, but this page describes in some detail what you are trying to do with the DMZ, etc.

http://www.tldp.org/HOWTO/IPCHAINS-HOWTO-7.html

jaa