Firewall/NAT

Hi,

Sorry if I am using the wrong terms here. What would be the best approach to making LAN ports only communicate with the WAN the port and not communicate with other LAN ports?

I have a three port Soekris 4801 with setup with the ports setup as WAN, NAT, and  DMZ ports, similar to the DMZ example in the documentation. I have just added a lan1641 four port ethernet adapter to the Soekris and I would like to give the new ports "private" access to the WAN.

This is what I'd like to set up:

WAN - a few IP numbers
DMZ - a couple of public servers with 1:1 NAT
LAN1 - can't communicate rest of LAN ports
LAN2 - ""
LAN3 - ""
LAN4 - ""
LAN5 - ""

I am using m0n0wall to share a T1 connection with a few other small small businesses on our floor. I recommend that other offices use a router for security, but I see if I plug in that all their printers are visible on the network. I want to be able put each of these ports on it's own segment so people aren't printing to each others printers or worse.

Thanks,
-marc

Put in the appropriate rules on each LAN interface so they can't talk to other LAN interfaces.

So simple. 

Thanks,
-marc