Thanks, Tom and Jacques! Jacques was absolutely right about the /etc/hosts.deny and my ISP *is* apparently blocking port 80 but the correct DNAT syntax fixed that so Tom, I appreciated your response as well.
I appreciate the most excellent support! regards, paul -----Original Message----- From: Tom Eastep [mailto:[EMAIL PROTECTED]] Sent: Saturday, July 13, 2002 11:18 AM To: Paul M. Wright, Jr. Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] Bering/Shorewall 1.3.3 - Accessing internal Web server On Sat, 13 Jul 2002, Paul M. Wright, Jr. wrote: > I just upgraded to the new Shorewall package and am now trying to make an > internal Web server visible to the Internet. Eventually I'll put it in a > DMZ so this is just for testing. > > I added the following to the Shorewall rules: > > # > DNAT net loc:192.168.1.201 tcp 80 > # > > This doesn't seem to work. It is possible that my ISP is blocking port 80 > so I also tried > > # > DNAT net loc:192.168.1.201 tcp 80 81 > # > That rule should have been: DNAT net loc:192.168.1.201:80 tcp 81 -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED] ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html