Hi, I am sorry, I don't get the point. As far, as I understood, you have a webserver and a database server. The webserver is listening on both external interfaces and answeres queries from there. Your database server (I assume MySQL, according to the port 3306) runs on an internal machine with an internal ip-address. So far so good. Do you want to allow internet access to your database server or do you want your webserver to query the db-server? If you want your db-server to be accessible from the internet, you have to enable NAT. If you want to enable queries from your webserver, you have to install the db-client on your webserver, which opens the db-connection for you. regards, Stefan -----Ursprüngliche Nachricht----- Von: Nils Wunsch [mailto:nils.wunsch@gmx.net] Gesendet: Mittwoch, 21. November 2001 12:40 An: suse-security@suse.com Betreff: [suse-security] suse-security] Network extren Intern Hello of people I have a problem Web server (Ext1) is queried then it at EXT2 transferred because it with the data base server INT1 is connected as I can make it mine has script in the appendix who can it times please checks somewhere an extreme error. Thanks you Nils. +----------------+ | Internet | +-------+--------+ | | +--+---------+---+ | ext1 ext2 |Internat DBserver +----------------+ | Firewall | +----------------+ 192.168.0.0/24 | | | | +----------------+ | int1 +-+ +----------------+ EXT1 is offizial IP for webserver EXT2 is database IP INT1 is intern IP network Database server for ext2 and ext1 work Ports 1: 3306 2: 10000-10100 3: ftp 4: ssh