i use dachstein CD and i think the configuration is not so different than yours. so this is what i do :
eth0_IPADDR=a.b.c.d eth0_MASKLEN=24 eth0_BROADCAST=+ eth0_DEFAULT_GW=a.b.c.e eth1_IPADDR=192.168.x.x eth1_MASKLEN=24 eth1_BROADCAST=+ eth2_IPADDR=192.168.x.x eth2_MASKLEN=24 eth2_BROADCAST=+ IPFILTER_SWITCH=firewall EXTERN_IF="eth0" EXTERN_DHCP=NO INTERN_IF="eth1" INTERN_NET=192.168.x.x/x INTERN_IP=192.168.x.x DMZ_SWITCH=PRIVATE DMZ_IF="eth2" DMZ_NET=192.168.x.x/x DMZ_SERVER0="tcp a.b.c.d www 192.168.x.x www" and then in /etc/ipchains.input i give : /sbin/ipchains -A input -i eth0 -p tcp -s 0/0 -d \ a.b.c.d 80 -j ACCEPT i hope this helps..... regards, gregor --- "Tibbs, Richard" <[EMAIL PROTECTED]> wrote: > Dear list. > I am running a roughly 2-year old version of > Dachstien (floppy boot) as > a firewall through a DSL connection. > I recently added a windoze 2003 server machine to my > internal net, and > set up IIS on it. My ISP has given me a static IP, > and I want to serve > web from the W2003 box. I looked through the mail > archives and found > several helpful remarks, which I followed. > Everything works from clients on the internal > network, access to web, as > well as access to the win2003 home page via the > internal ip address. > > If I hook the win2003 server directly to my DSL > modem (configure the NIC > with the static IP), I can get my home page from any > other location (say > work). > But, if I put the web server on the internal > network, behind the > firewall, I get a DNS Error/server not found page > from work. > > Changes that I made to the default network.conf > (via lrcfg) are as > follows: > ConfigDNS=YES > eth0_IPADDR = <static ip/26> > EXTERN_DHCP=NO > EXTERN_TCP_Port0 "0/0 www 192.168.x.y/24 > INTERNAL_WWW_SERVER=192.168.x.y > and, firewall rules via weblet show port forwarding > to my 192.168.x.y > win2003 box. > > Is the above sufficient? > To enable an internal web server do I need to issue > a ipfwadm or > ipchains command after boot-up in addition to the > changes mentioned > above to network.conf? > Or could this be a win2003 security policy issue? > > Thanks, > Confused Dachstein Leaf user. > > > ------------------------------------------------------- > This SF.net email is sponsored by OSDN's Audience > Survey. > Help shape OSDN's sites and tell us what you think. > Take this > five minute survey and you could win a $250 Gift > Certificate. > http://www.wrgsurveys.com/2003/osdntech03.php?site=8 > ------------------------------------------------------------------------ > leaf-user mailing list: > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html __________________________________ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree ------------------------------------------------------- This SF.net email is sponsored by OSDN's Audience Survey. Help shape OSDN's sites and tell us what you think. Take this five minute survey and you could win a $250 Gift Certificate. http://www.wrgsurveys.com/2003/osdntech03.php?site=8 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
