Firewall - Very limited Access - suggestions

[Don Campbell]

Look into Firestarter:
http://firestarter.sourceforge.net/index.php

gui setup, a knowledgeable group who contribute to a very helpful
email list. Your needs sound like they're for a very high level
of security. You probably should also look into ways of hardening
the machine that is the firewall.

Kevin F. Berrien wrote:

> I'm intersted in building a bastion firewall for the following 
> sistuation.  Have a closed network (police dept).  There are no 
> crosses to the internet.  However, we'd like VERY LIMITED access by 
> the Windows DC server for the following: Windows update (via SUS), 
> Symantec AV updates, VNC/or remote desktop connection to 1 or 2 
> workstations on our WAN.
>
> Thus, I want to limit all traffic except various protocols/ports 
> between specific IP's/URL's.
>
> Certianly FC and iptables can do this, does anyone recommend a 
> configuration utility, start off  scripts, etc?  Should I be looking 
> more into LRP (now defunct), etc?  My iptables knowledge is not great 
> (did it years ago), so some configuration utility would be great, and 
> my co-workers isn't experienced in this area at all.
>
>