🚀 go-pugleaf

Hi,

I am put in charge to design/implement a firewall for our class C 
network with an ISDN connection to internet. Our goal is to control the
access from the outside and yet provide the maximum transparency.

1. From our class C network, all outgoing connections can be
   allowed/denied bases on the IP addresses/ports.
2. From outside, all incoming connections should go through the
   firewall and we can control the access. If necessary, we can allow
   any incoming connections based on the IP addresses/ports.
3. We plan to run a few Internet servers on the firewall machine which
   are accessible from the outside.
4. To access our Class C network from the outside, we should be able to
   login on the firewall machine and go from there.

From what we need, I am not sure proxy services will be sufficient for
us. Since the traffic between our network and the outside won't be very
heavy, I am thinking to implement the router/firewall machine on a Unix
machine with an ISDN interface using a router with a packet filter. I 
was wondering what free/commercial packet filtering routers available
for Unix, especially for Linux. Will screend work in this case?

Thanks a lot.

H.J.