(servers) Assume you have two firewalls (FWI and FW2), each with two ethernet interfaces (eth0 and eth 1). - FWI protects the DMZ, and FW2 protects the LAN Define an iptables policy for FWI that Allows new Internet traffic to reach port 80 on 10.0.1.13 Does not allow traffic to reach the LAN (10.0.2.0/24) Define an iptables policy for FW2 that FW1 FW2 Internet PLAN eth0 oth Yotho AN Allows internal hosts to reach the webserver, but nothing else in the DMZ (10.0.1.0/24), and can reach the larger Internet Prevents DMZ hosts from initiating connections to LAN