Peter <pete...@mweb.co.za> a crit dans le message :
38a80822$0$35...@helios.is.co.za...
I would use the old Outside/DMZ/Inside topic.
Box1 : Modem, eth0, eth1
Box2 : eth0
Internet --> ISP --> Modem-Box1
Box1-eth0 --> eth0-Box2
Box1-eth1 --> Intranet --> Windows boxes
As is, filtering will be easier and much more efficient as Internet
services which are not provided by your second box as they do not have
to be routed nor filtered by box2.