192.168.0.1 is the IP of your Webserver on your internal net? And e.g. 192.168.0.254 is the IP of the internal network interface of your masquerading "proxy"/ router?! It is realy masquerading or just a proxy? It should at lease masquerade 192.168.0.1 AFAIK For me this works for another port well. You should debug by tail -f /var/log/firewall on your router. -- Eat, sleep and go running, David Huecking. Encrypted eMail welcome! GnuPG/ PGP-Fingerprint: 3DF2 CBE0 DFAA 4164 02C2 4E2A E005 8DF7 5780 9216 On Mon, 7 Oct 2002, Christian Weickhmann wrote:
I've got a problem forwarding port 80 from my proxy's external interface to my server on the internal network.
I use SuSEfirewall2 and inserting FW_FORWARD_MASQ="0/0,192.168.0.1,tcp,80" doesn't work.
I know that this is a security issue but I need it that way, so no security discussion please.