Thanks, Tom and Jacques!

Jacques was absolutely right about the /etc/hosts.deny and my ISP *is*
apparently blocking port 80 but the correct DNAT syntax fixed that so Tom, I
appreciated your response as well.

I appreciate the most excellent support!

regards,

paul


-----Original Message-----
From: Tom Eastep [mailto:[EMAIL PROTECTED]]
Sent: Saturday, July 13, 2002 11:18 AM
To: Paul M. Wright, Jr.
Cc: [EMAIL PROTECTED]
Subject: Re: [leaf-user] Bering/Shorewall 1.3.3 - Accessing internal Web
server


On Sat, 13 Jul 2002, Paul M. Wright, Jr. wrote:

> I just upgraded to the new Shorewall package and am now trying to make an
> internal Web server visible to the Internet.  Eventually I'll put it in a
> DMZ so this is just for testing.
>
> I added the following to the Shorewall rules:
>
> #
> DNAT            net     loc:192.168.1.201 tcp   80
> #
>
> This doesn't seem to work.  It is possible that my ISP is blocking port 80
> so I also tried
>
> #
> DNAT          net     loc:192.168.1.201 tcp 80  81
> #
>

That rule should have been:

DNAT    net     loc:192.168.1.201:80    tcp     81

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ [EMAIL PROTECTED]




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to