Re: [suse-security] susefirewall2 dmz ftp

* Frédéric Poulet; on 12 Nov, 2002 wrote:

i see my web server from internet, from public ip, and from intern network, from local ip but not from public ip, is it normal ?

yes Syslog on the server probably says: SuSE-FW-NO_ACCESS_INT->FWEXT IN=eth0 OUT= This gives you the clue: the firewall is set up to prevent internal machines from accessing the external port (it's an anti-spoofing measure). You will need to add a rule (or rules) to /etc/sysconfig/scripts/SuSEfirewall2-custom. In fw_custom_before_antispoofing(), add: iptables -A INPUT -i eth0 -s -d -j ACCEPT is like 192.168.0.0/24 (as appropriate to your LAN) is the IP address for the external interface. Note that you want to specify both the source interface (eth0) and the source address, so that the rule is NOT applied to packets coming from the internet side (spoofing an internal address). Change as necessary

my second problem is that i don't see my ftp from internet but i don't know why but i see my ftp from intern network !

What does the messages say -- Togan Muftuoglu Unofficial SuSE FAQ Maintainer http://dinamizm.ath.cx