Here is my setup:
All nodes are running Ubuntu 10.04 LTS
I have a machine, node1, that acts as a proxy server for a private network. It forwards all incoming connections on port 80 and 443 to my webserver, node2, which has a private ip of
10.182.33.141 and no public IP.
I have several other nodes: node3 is a database server, node4 is a memcached server, etc. They all have a private IP and no public IP.
I want node1 to act as a firewall as well, while still forwarding ports 80 and 443 to node2.
What is the BEST way to configure node1 to begin acting as a firewall? What are some ways to test said firewall for security?
Any direction is greatly appreciated! I'm sorry if this has been asked before, I did search and did not find what I was looking for.
FOR REFERENCE: (iptables -t nat -L)
Chain PREROUTING (policy ACCEPT) target prot opt source destination DNAT tcp -- anywhere node1 tcp dpt:www to:10.182.33.141:80 DNAT tcp -- anywhere node1 tcp dpt:https to:10.182.33.141:443 Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination MASQUERADE all -- anywhere anywhere
iptables -L is currently empty.