[gentoo-user] Example Kernel conf for versatile iptables setup

Where can I see a condensed overview of what needs to be set in the
kernel for maximum flexibility using iptables and snort?

This google search:
   site:gentoo.org "kernel settings"  iptables 

Turns up a number of shortish discussions in the forums but nothing in
actual gentoo documentation.

   site:gentoo.org kernel iptables

Broadening the search brings alot more list discussion but so much it
will be a pretty big undertaking to scan thru even a fraction of it.

Is there anyone here who may know a more detailed presentation or
discussion they can point me at?

My aim is setting up a small somewhat hardened OS that will serve as a
half booty DMZ... `half' in that it will not route anything to lan or
anywhere else (other than iptable/snort logs).  It will receive the
rejected traffic from an upstream firewall router.

The logs are what I'm after so it will mainly reject and log.

-- 
gentoo-user@g.o mailing list