Firewall Box

[Matt Kopishke <kopishke@midcoast.com>]

Hi, I need to implement a firewall at work.  It will be for the most part
a pretty simple set up.  I am going to set one of our Linux Boxes between
the Router and the Switch.  The Box has 3 NICs, one for the router side,
one for the switch, and one for a backup cable connection.  We have a
block of IPs, and we will need to get to machines behind the firewall from
the out side so I don't want to use ipmasq.  What I plan on doing is just
using ipchains to shutoff any unused ports, and strip the box of any
questionable software (ie ssh instead of telnet).  Has any one tried such a
set up?  And if they have could you pass on any pointers or things to
watch out for?  I also see there are a few packages out there to aid
setup, how well do they work?

Thanks, 

                -Matt-

 -----------------------+----------------------------------------------+
 kopishke@midcoast.com  |                                              |
 http://www.flni.com    | A long time ago, in a state far, far away... |
 Web Guru, Perl jocky,  | 	          OKLAHOMA!                    |
 Linux bum, etc...      |        http://www.waldotheatre.org           |
 --Debian GNU/Linux--   |                                              |
 -----------------------+----------------------------------------------+