On Fri, 7 Aug 2009, Paul Heinlein wrote: > In the past, I'd have tried to craft the iptables rules by hand. Now, > older and lazier, I rely on shorewall. This is a +1 for shorewall, which is 42 times simpler [*] than doing it by hand. Steve [*] Actually, it's more than 42, but 42 is The Answer.