DMZ with Ipchains

[maine]

Currently I'm running RH 7.1 and I'm using the machine as a gateway for the rest of my network. Right now the box has two nic cards and is masquerading my ip. The only thing I'm not sure on is how to go about setting up a DMZ with ipchains. Do I need to add another nic or what? Any help would be appreciated.

[rioguia]

i use a dedicated box for my smoothwall firewall that does have three nics. i did some research on other firewalls and considered this as an alternative. it doesn't seem to require three nics.

http://www.openlysecure.org/linux/scripts/rc.simple.dmz.html

[rioguia]

i'm sure you probably solved this problem by now but i came across a really fine example of how to solve this problem and a great explanation of nat and firewalls.
http://www.bastille-linux.org/jay/soho-iptables-nat.txt
http://www.bastille-linux.org/jay/building-firewall.html