iptables q:

[Tinus Nijmeijers <tinus@deephosting.com>]

I have this great shorewall-based iptables setup that I have screwed up
and reading it I have to admit that I have no idea really where to
begin. 
(Started reading the iptables-tutorial but I'm als in a hurry here.)

Could someone divulge how I do this:

firewall
eth0: internet
eth1: internal net

-allow anything from the internal net to the firewall
-allow port 22 from the outside to the firewall
-masquerade ONLY port 80 from internal to internet.

everything else should be closed.

thanks.

tinus