On Thu, 2004-10-14 at 14:41, Raul H. Lapitzondo wrote:
I have problems to connect from my internal LAN to services (http,smtp) in DMZ. Example : I can't send mail with my mail server but it's possible when i connect outside my network.
But it does not stop to connect to me with other services, outside my network
Any idea ?
This is most likely a routing issue.
# route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.0 * 255.255.255.0 U 0 0 0 eth1 192.168.0.0 * 255.255.255.0 U 0 0 0 eth0 link-local * 255.255.0.0 U 0 0 0 eth0 loopback * 255.0.0.0 U 0 0 0 lo default 192.168.1.1 0.0.0.0 UG 0 0 0 eth1
You describe having a tri-homed configuration but you only have 2 NICs configured. You need to have one facing the internet, one facing the dmz, and one facing the lan. When you're finished you should end up with something like this: NS2:~ # route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 66.95.xx.xx * 255.255.255.248 U 0 0 0 eth0 192.168.1.0 * 255.255.255.0 U 0 0 0 eth1 192.168.0.0 * 255.255.255.0 U 0 0 0 eth2 link-local * 255.255.0.0 U 0 0 0 eth0 loopback * 255.0.0.0 U 0 0 0 lo default 66.95.xx.xx 0.0.0.0 UG 0 0 0 eth0 Best wishes, Jeff