On Wednesday 03 December 2003 08:19 am, Tibbs, Richard wrote: > The is the update: Now web server is accessible from the outside. > Since I tried both Rays and Greg's suggestions I will have to put them > on one at a time to figure out which one did the trick. If it was the > ipchains cmd that did it, I can't understand since the same input chain > rule was already present (see below).
You need to both open the port on the firewall and port-forward the service. See the "port-forwarding w/Dachstein" FAQ on the LEAF site for more details. > I am still curious if anyone can explain why I cannot use the external > IP address 216.12.yy.xx in a web browser on an internal machine to reach > the web server. This is ip_spoofing protection. The firewall will not take incoming packets from the same ip address it uses. Otherwise tons of script-kiddies could spoof your external address and gain access as normal traffic. Set an internal DNS server to resolve the private address on your LAN. -- ~Lynn Avants Linux Embedded Appliance Firewall Developer http://leaf.sourceforge.net http://guitarlynn.homelinux.org:81 ------------------------------------------------------- This SF.net email is sponsored by OSDN's Audience Survey. Help shape OSDN's sites and tell us what you think. Take this five minute survey and you could win a $250 Gift Certificate. http://www.wrgsurveys.com/2003/osdntech03.php?site=8 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
