I really dont have any use for UDP I just left it open just playing around
with it. I worked on it ALL day yesterday and got nothing.
STUPID ME never thought to change the DMZ system gateway to the IP of eth2!!
Saw this in one of the other threads, change to the right default gateway
and the DMZ system can now see the internet.
This is halfway there. I am still having trouble with the webserver that is
on the DMZ system.
>From: "Tony" <[EMAIL PROTECTED]>
>To: "djoutlaw outlaw" <[EMAIL PROTECTED]>,
><[EMAIL PROTECTED]>
>Subject: RE: [Leaf-user] Help with a webserver on a DMZ network.
>Date: Mon, 31 Dec 2001 19:47:03 -0500
>
>I am just starting to setup a DMZ, but I have a few questions on your
>setup,
>the are noted below
>
> >
> >
> > # Set EXTERN_IP to "DYNAMIC" if you need the rules to read the IP from
>the
> > # interface, but you arn't using DHCP (ie PPPoE and dialup users)
> > EXTERN_IP=PUBLIC IP
> > ^^^^^^^^^^
>
>What's the purpose of this entry? From what I see in the network.conf
>file,
>the line above
>should take care of business:
># External Interface IP number...the default should be fine for most folks
>#eval EXTERN_IP=\"\${"$EXTERN_IF"_IPADDR:-""}\"
>
>
>[snip]
> >
> > ## UDP Services open to outside world
> > # Space seperated list: srcip/mask_dstport
> > # NOTE: bootpc port is used for dhcp client
> > EXTERN_UDP_PORTS="0/0_80"
> >
>
>And why do you have udp 80 open? Webservers use tcp.
>
> >
> > # TCP services open to outside world
> > # Space seperated list: srcip/mask_dstport
> > EXTERN_TCP_PORTS="0/0_80"
> >
>
>Good
>
>
>I don't know that much about setting up a DMZ (yet) but this is what jumps
>out at me as strange in the setup. I hope this is somewhat helpful.
>
>Later
>
>Tony
>
>
_________________________________________________________________
Join the world�s largest e-mail service with MSN Hotmail.
http://www.hotmail.com
_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
