his is not working... i am directly at the firewall box with suse8 and trying to ping the .66 the mailserver wich is connected to the eth1... when pinging the firewall always wants to output it to the eth0 device... what kind of routes do i need? this is too confusing cos its not working as far as my knowledge tells me... but noone can really tell me how its supposed to work... ----- Original Message ----- From: "Togan Muftuoglu" To: "Suse-Security" Sent: Monday, August 19, 2002 9:05 PM Subject: Re: [suse-security] how can i have public IPs in the DMZ with SuSEfirewall2

* Andreas Bittner; on 19 Aug, 2002 wrote:

...

hello there togan,

i am not very good at these dmz/ip/routing nd iptables stuff.. and i simply dont understand what i would have to set for my dmz ip..

the mailserver is x.x.x.66 i agree i set/leave it like that.. i set x.x.x.67 for example to the external eth0 card that connects to the isp router that has x.x.x65. eth0 a has mask of 255.255.255.248 right? and what does the DMZ eth1 have? x.x.x.65 for eaxmple with same 255.255.255.248 mask? will susefirewall2 give the packets for .66 to that eth1 card? will this all work?

can you please help me.

It is always a good idea to reply to list as there are more eyes to correct mistakes, I happen to have only two -)

yes x.x.x.65 with 255.255.255.248 for eth1 in DMZ is fine

--

Togan Muftuoglu

-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here