Fw: [SLE] Problem with SuSEfirewall2
Cross-Posting to SuSE security - seems more appropriate Derek ----- Original Message ----- From: "Derek Clifford" <derek_clifford@fermi.demon.co.uk> To: <suse-linux-e@suse.com> Sent: 20 February 2003 16:22 Subject: Fw: [SLE] Problem with SuSEfirewall2
----- Original Message ----- From: "Derek Clifford" <derek_clifford@fermi.demon.co.uk> To: "Jostein Berntsen" <jostein.berntsen@sensewave.com> Sent: 20 February 2003 16:22 Subject: Re: [SLE] Problem with SuSEfirewall2
Ok, thanks, I find that I don't have these files with SuSE 8.0, but here are the SuSEfirewall2 files and the SuSEfirewall custom file.
Regards, Derek
----- Original Message ----- From: "Jostein Berntsen" <jostein.berntsen@sensewave.com> To: <suse-linux-e@suse.com> Sent: 20 February 2003 11:45 Subject: Re: [SLE] Problem with SuSEfirewall2
Hi,
Check this:
http://toganm.tripod.com/misc/unofficial.html#AEN1834
and send the output of the commands to the list.
Jostein
I have a setup with a linux gateway connected to the internet
serving
two masqueraded networks, one my normal internal lan, the other a dmz running a web server. What I want to do is to use a machine on my normal lan to access the web server. Routing from the lan to the dmz using internal addresses works fine, but I want to be able to access the machine in the dmz via the external interface, so that the machine addresses I use to test the setup are exactly the same as those used by someone connecting from outside. I have seen the suggestion to add in the custom setup file: iptables -A INPUT -i eth0 -s 192.168.xxx.0/24 -d xxx.xxx.xx.xxx -j ACCEPT Now this gets me as far as my gateway - if I put a web server on the gateway I can access it with the external addresses from the internal LAN, but what I really want is to route this access to the server in the dmz. The routing works from outside my net, but I cannot simulate this from inside the net. Any suggestions?
Regards, Derek
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
---------------------------------------------------------------------------- ----
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
participants (1)
-
Derek Clifford