
I'm using the SuSEfirewall2 for firewalling and NAT, I have two interfaces (INT & EXT), where the external is eth0 and the internal is eth1. Everything seems to work fine but I can't see anything in the external interface from the external one (that means I can't access the webpages I host...). This is my config: FW_QUICKMODE="no" FW_DEV_EXT="eth0" FW_DEV_INT="eth1" FW_DEV_DMZ="" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_DEV="$FW_DEV_EXT" FW_MASQ_NETS="0/0" FW_PROTECT_FROM_INTERNAL="no" FW_AUTOPROTECT_SERVICES="yes" FW_SERVICES_EXT_TCP="www smtp domain ftp ssh https pop3" FW_SERVICES_EXT_UDP="domain" FW_SERVICES_EXT_IP="" FW_SERVICES_DMZ_TCP="" FW_SERVICES_DMZ_UDP="" FW_SERVICES_DMZ_IP="" FW_SERVICES_INT_TCP="ssh smtp domain ftp pop3 http https imap" FW_SERVICES_INT_UDP="domain syslog" FW_SERVICES_INT_IP="" FW_SERVICES_QUICK_TCP="" FW_SERVICES_QUICK_UDP="" FW_SERVICES_QUICK_IP="" FW_TRUSTED_NETS="" FW_ALLOW_INCOMING_HIGHPORTS_TCP="yes" FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes" #DNS FW_SERVICE_AUTODETECT="yes" # Autodetect the services below when tarting FW_SERVICE_DNS="yes" FW_SERVICE_DHCLIENT="no" FW_SERVICE_DHCPD="no" FW_SERVICE_SQUID="no" FW_SERVICE_SAMBA="no" FW_FORWARD="" # Beware to use this! FW_FORWARD_MASQ="" # Beware to use this! FW_REDIRECT="" W_LOG_DROP_CRIT="yes" FW_LOG_DROP_ALL="no" FW_LOG_ACCEPT_CRIT="yes" FW_LOG_ACCEPT_ALL="no" FW_KERNEL_SECURITY="yes" FW_STOP_KEEP_ROUTING_STATE="no" FW_ALLOW_PING_FW="yes" FW_ALLOW_PING_DMZ="yes" FW_ALLOW_PING_EXT="yes" FW_ALLOW_FW_TRACEROUTE="yes" FW_ALLOW_FW_SOURCEQUENCH="yes" FW_ALLOW_FW_BROADCAST="no" FW_IGNORE_FW_BROADCAST="yes" FW_ALLOW_CLASS_ROUTING="yes" FW_CUSTOMRULES="" FW_REJECT="no" Is there anything wrong? Thx. Fernando Valderrábano Reyes FROM Computer Systems. ----------------------------------------- "UNIXMEXICO la comunidad *nix en todo México!" http://www.unixmexico.org/

On Mon, Dec 30, 2002 at 06:52:52PM -0600, Fernando Valderrabano Reyes wrote:
I'm using the SuSEfirewall2 for firewalling and NAT, I have two interfaces (INT & EXT), where the external is eth0 and the internal is eth1.
Everything seems to work fine but I can't see anything in the external interface from the external one (that means I can't access the webpages I host...).
This is my config:
FW_DEV_EXT="eth0" FW_DEV_INT="eth1"
FW_MASQUERADE="yes" FW_MASQ_DEV="$FW_DEV_EXT" FW_MASQ_NETS="0/0"
Replacing 0/0 with your internal net (the one on eth1) might help.
Is there anything wrong?
Ciao Jörg -- Joerg Mayer <jmayer@loplof.de> I found out that "pro" means "instead of" (as in proconsul). Now I know what proactive means.
participants (2)
-
Fernando Valderrabano Reyes
-
Joerg Mayer