I'm going to go slightly OT as this is one I am currently going around with...

I would *like* to get something like firestarter working from CD so that I could use Knoppix as a firewall machine. I don't know enough about iptables to make my own, but I'm looking into doing that.

More to the OP though, you're fine if you're sitting behind a well secured firewall. That *should* be taking care of you.

However, if you're not behind a firewall (for instance if the knoppix boxen has two nics and is the first device on your dsl router) in my opinion there would be some risk in that if you get hacked your local drives are on the machine (W2K r/o partitions, FAT r/w partions). Also, since I'm REALLY paranoid I would also say there is a risk that an individual could exploit your connection to gain access to other computers or devices on your network.

Any body know of any scripts (like the old pmfirewall script for the old ipchains) that would be able to this for iptables?

~paul