It seems I got things working now
I can connect to the webserver using my puplic IP
I cant use the public IP from the LAN. I have to use the private IP of the
box on the DMZ. I can live with that.
>From: "Tony" <[EMAIL PROTECTED]>
>To: "djoutlaw outlaw" <[EMAIL PROTECTED]>,
><[EMAIL PROTECTED]>
>Subject: RE: [Leaf-user] Help with a webserver on a DMZ network.
>Date: Mon, 31 Dec 2001 19:47:03 -0500
>
>I am just starting to setup a DMZ, but I have a few questions on your
>setup,
>the are noted below
>
> >
> >
> > # Set EXTERN_IP to "DYNAMIC" if you need the rules to read the IP from
>the
> > # interface, but you arn't using DHCP (ie PPPoE and dialup users)
> > EXTERN_IP=PUBLIC IP
> > ^^^^^^^^^^
>
>What's the purpose of this entry? From what I see in the network.conf
>file,
>the line above
>should take care of business:
># External Interface IP number...the default should be fine for most folks
>#eval EXTERN_IP=\"\${"$EXTERN_IF"_IPADDR:-""}\"
>
>
>[snip]
> >
> > ## UDP Services open to outside world
> > # Space seperated list: srcip/mask_dstport
> > # NOTE: bootpc port is used for dhcp client
> > EXTERN_UDP_PORTS="0/0_80"
> >
>
>And why do you have udp 80 open? Webservers use tcp.
>
> >
> > # TCP services open to outside world
> > # Space seperated list: srcip/mask_dstport
> > EXTERN_TCP_PORTS="0/0_80"
> >
>
>Good
>
>
>I don't know that much about setting up a DMZ (yet) but this is what jumps
>out at me as strange in the setup. I hope this is somewhat helpful.
>
>Later
>
>Tony
>
>
_________________________________________________________________
Join the world�s largest e-mail service with MSN Hotmail.
http://www.hotmail.com
_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
