19 Apr
2009
19 Apr
'09
15:49
LLLActive@GMX.Net wrote: > LLLActive@GMX.Net wrote: > >> Anders Johansson wrote: >> >> >>> On Sunday 19 April 2009 16:42:31 LLLActive@GMX.Net wrote: >>> >>> >>> >>>> I cannot ping the internal machines (e.g. 192.168.0.10) from 192.168.176.10 >>>> >>>> >>>> >>> btw, if the problem is only with pinging, then note that you can't forward >>> icmp packets at all with SuSEfirewall2 >>> >>> >>> >> I only added icmp for pining, but actually cannot access a website in >> the private IP DMZ as described here: >> >> http://forgeftp.novell.com/susefirewall2/web/FAQ.html#id2480668 (*7. >> *What if my Server has a private IP address, how do I enable external >> access then?) >> >> icmp will be removed, cause it is wrong in my config (I'm a novice). >> >> :-) >> Al >> >> > Actually, my problem is as follows: > > I have DynDNS to a SuSEfirewall2 running Apache2. I have a webpage on > it. I now want to put a link in this webpage to a machine with a private > IP in the DMZ, that should open up in a browser. > > The other system in the DMZ is a webserver that needs a sql database > access - over the internal firewall in the private network - It's a 2 firewall machine setup with a dmz between them - > for data it presents on the webserver (with a software gateway > from the webserver to the database, eg. used by SAP appserver & Oracle > database server and cache from Intersystems.) > > :-) > Al > > your reply: Anders Johansson wrote: > > > So you mean that when you try to access the external IP of your firewall with > something like http://192.168.176.1/ you get nothing? > no, I ping from the external firewall to the internal firewall's internal NIC. That works, but not the machines on the same side as the NIC. > Do you get anything in the logs, /var/log/messages or (perhaps more relevant) > /var/log/firewall > > I had a look with verbose protocolling on. Nothing about dropping anything. > Anders > Thanx, Al -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org