I had a similar problem and "fixed" it as follows. The SUSE firewall configuration file is in /etc/rc.config.d/firewall.rc.config. Option 14 in this file relates to port forwarding to internal private IP addresses. This is what I wanted to do. However when I put in the appropriate values it didn't work. Looking at the file /sbin/SuSEfirewall shows you that this option 14 feeds into ipmasqadm mfw (look at line 808). I looked at ipchains logs etc and various other things and while they looked OK It just didn't work. I must admit I don't fully understand ipchains and marking and haven't tried too hard to do so :) I changed line 808 in this file to use the portfw module instead of mfw as follows :- ipmasqadm portfw -a -P tcp -L $PARAM1 $PARAM3 -R $PARAM2 $PARAM3 After restarting my linux box with firewall now port forwarding was OK. This lets me forward from an ip address to the same port on another ipaddress. If you want to change ports as well then you need to allow for a $PARAM4. Hope this helps. David Milligan PS : I am going to post this to suse security to see why mfw doesn't appear to work in the firewall script. -----Original Message----- From: Konstantin (Kastus) Shchuka Sent: Mon 26/02/2001 3:37 p.m. To: suse-linux-e@suse.com Cc: Subject: [SLE] port forwarding with firewals-2.1-5 Hi there, Has anybody on the list got any success configuring port forwarding using firewals-2.1-5.rpm? I am driven completely mad. I followed all comments in configuration file, I looked thoroughly through examples, -- to no avail! I also tried ipmasqadm with mfw module--no good. What I actually need to do: I have SuSE 6.4 box as a firewall. I have an NT box on internal network. I need to make Apache running on NT visible from the Internet. Pretty simple, you would say. I thought it too. It appeared not so simple. Please help. -Kastus -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq