On 12/28/2011 11:56 AM, Craig White wrote:
On Tue, 2011-12-27 at 21:30 -0500, Tom Horsley wrote:
> I keep thinking along the lines of setting up a new bridge
> on a separate subnet and doing some sort of NAT routing,
> but details escape me. I can write those words, but have no
> idea how to actually accomplish what I want (especially how
> to restrict the NAT to the outside world and prevent any
> access to local LAN).
>
> I keep thinking this should have been dome by someone already
> and there should be examples out there, anyone know of any?
----
decent routers have the option for a 'DMZ' host that will achieve what
you want without any effort.
Searches for how to setup a DMZ or "iptables DMZ" or whatever are also
pretty fruitful -- and its exactly what you're looking for. (Doing it
yourself is more fun, imho. But "fun" == "takes time" so...)