Hi all,
I have 2 networks behind my fw (at least i'm trying to do that). One
uses internal IP's and is our office net, the other is our external c block,
which has the fw and the web/mail/etc server on it. I can get everything
to work fine as long as I set Forwarding to default accept, which I
obviously don't want to do. If I set it to default reject, masq internal
addresses, and allow forwarding to/from our c-block, it rejects
everything going out from the fw and webserver. I understand how
the incoming/outgoing fw rules work, but I'm not sure about forwarding.
Is forwarding called everytime a packet tries to leave the network or come
in from outside? If so shouldn't
"ipfwadm -F -a accept -S $extnet -D $universe",
"ipfwadm -F -a accept -S $universe -D $extnet", and
"ipfwadm -F -a -m -S $intnet -D $universe"
($extnet=our c-block, $intnet=internal net, and $universe=everything else)
work?
When I set these rules, the fw can ping out but can't make any tcp
connections,
and the web server gets "no route to host" if it tries to ping out.
Anyone have any ideas on how I can get this to work?
fw: linux 2.0.36
extnet on eth0 (x.x.x.249)
intnet on eth1 (172.23.1.250)
Connection: isdn on ppp0 (x.x.x.250)
server: linux 2.0.36
extnet on eth0 (x.x.x.1, x.x.x.3)
Thanks,
John
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
