Need help to configure a gateway server in linux

I am using Fedora core 8 as a gateway server. In my gateway server I have configured DHCP, DNS, Squid Proxy & it will act as router (IPForwarding). I am connecting internet using Linksys broadband router in that router NAT enabled. If any client connects to my gateway server they can able to access the internet directly because in router NAT enabled and in getaway server IP-Forwarding enabled.


I enable IP-Forwarding in gateway server for VPN Routing.

Problem:

From any client pc if we ping google.com or any website I am getting icmp reply by default, so user not using the proxy server they accessing the internet directly. This problem occurs due to enable NAT in router and IPforwarding in gateway server.


Gateway server NIC details:
eth0: 192.168.0.0/24   (For local connection)
eth1: 192.168.20.0/24 (For broadband connection)

This is my requirement:

1)      I want to block the user to access the internet directly, by using firewall. (without disable the NAT and IP-Forwarding)
2)      I want to allow one particular ip to access the internet directly via gateway server using NAT.
3)      Allow one particular website (eg. MSDN site) to all via NAT in gateway server.


rajasekarramasamyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

AngelGabrielCommented:
You should look into a distribution called Endian Firewall - It will help you to achieve what you want, without having to learn to write iptables rules properly
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Linux

From novice to tech pro — start learning today.