Ralf Freisinger wrote:

Hello All,

perhaps can someone tell me the rules to forward requests to an official ip, set up as a virtual net dev on a firewall (eth0:1) to an inoff. adress behind the firewall (DMZ) port 80 (www-server)?

Thanks in advance Ralf

--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com

Ralf, your prblm descr. is a twitch brf, but maybe something like: iptables -P FORWARD DROP iptables -A FORWARD -i eth0 -s 10.1.1.0/24 -j Foo iptables -A FORWARD -i eth0 -j Bar iptables -A FORWARD -i eth1 -j ACCCEPT iptables -t nat -P POSTROUTING ACCEPT iptables -t nat -A POSTROUTING -o eth0 -s 10.1.1.0/24 -j SNAT --to-source 202.58.118.8 :)