I have a dual homed server in an install for someone who is very cost sensitive.

This server originally is being setup as an Asterisk server, but now the simplest

thing for me to do is also set it up to provide internet access for the small shop as well.

So it will have one external, WAN  facing nic that needs all incoming ports except UDP 5060 and

10000 -> 60000 blocked for all but two ips.

The internal, LAN facing  NIC will need all ports except voip/dns/http blocked to it, and need to

provide masquerading.

I have limited experience with iptables and would love some guidelines. Any pointers

would be greatly appreciated!

Thanks,
jlc