We will write a script to set up a DMZ using iptables. Create a dmz_iptables.sh script and write the following code in it:
# set the default policy to DROPiptables -P INPUT DROPiptables -P OUTPUT DROPiptables -P FORWARD DROP# to configure the system as a router, enable ip forwarding bysysctl -w net.ipv4.ip_forward=1# allow traffic from internal (eth0) to DMZ (eth2)iptables -t filter -A FORWARD -i eth0 -o eth2 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPTiptables -t filter -A FORWARD -i eth2 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT# allow traffic from internet (ens33) to DMZ (eth2)iptables -t filter -A FORWARD -i ens33 -o eth2 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPTiptables -t filter -A FORWARD -i ...
