----- Original Message ----- From: "Derek Clifford" To: "Jostein Berntsen" Sent: 20 February 2003 16:22 Subject: Re: [SLE] Problem with SuSEfirewall2

Ok, thanks, I find that I don't have these files with SuSE 8.0, but here are the SuSEfirewall2 files and the SuSEfirewall custom file.

Regards, Derek

----- Original Message ----- From: "Jostein Berntsen" To: Sent: 20 February 2003 11:45 Subject: Re: [SLE] Problem with SuSEfirewall2

...

Hi,

Check this:

http://toganm.tripod.com/misc/unofficial.html#AEN1834

and send the output of the commands to the list.

Jostein

...

I have a setup with a linux gateway connected to the internet serving two masqueraded networks, one my normal internal lan, the other a dmz running a web server. What I want to do is to use a machine on my normal lan to access the web server. Routing from the lan to the dmz using internal addresses works fine, but I want to be able to access the machine in the dmz via the external interface, so that the machine addresses I use to test the setup are exactly the same as those used by someone connecting from outside. I have seen the suggestion to add in the custom setup file: iptables -A INPUT -i eth0 -s 192.168.xxx.0/24 -d xxx.xxx.xx.xxx -j ACCEPT Now this gets me as far as my gateway - if I put a web server on the gateway I can access it with the external addresses from the internal LAN, but what I really want is to route this access to the server in the dmz. The routing works from outside my net, but I cannot simulate this from inside the net. Any suggestions?

Regards, Derek

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com