Hi folks! many people bothered me with the request to a) support SAMBA (as client and server) on the firewall b) put in config options to let the internet access hosts on the internal, masqueraded network I did that in 2.2beta, which is available from www.suse.de/~marc Please try it out if you need this functionality - but note: both things are not good for your security! *sigh* In 2.3 or 2.4 I'll add a more fine grained internet access for the internal network, so that it is not all-or-nothing, but you can say www and ftp for everyone, but mail only from the mailserver etc. Here's the CHANGES file for 2.2beta: v2.2 06.04.00 * Added the long awaited FW_SERVICE_SAMBA support! * Added FW_FORWARD_MASQ_{TCP,UDP} so people can make their webservers on the internal, masqueraded nets available to the internet. * Now masquerading timeouts are set * NOTE: changed the preconfigured value of FW_ALLOW_INCOMING_HIGHPORTS_{TCP,UDP} to "yes" * Renamed the file HOLES to PROBLEMS * Fixed some few typos Greets, Marc -- Marc Heuse, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg E@mail: marc@suse.de Function: Security Support & Auditing "lynx -source http://www.suse.de/~marc/marc.pgp | pgp -fka" Key fingerprint = B5 07 B6 4E 9C EF 27 EE 16 D9 70 D4 87 B5 63 6C