Smoothwall is not our dhcp server so I don't know if this will work. I 
think that I have to do something to the iptables and I don't really 
know what..
I found some guy talking about manually adding some junk to the 
rc.firewall.up file but I don't know enough to make a change to my 
existing file.

"/sbin/iptables -t nat -A PREROUTING -p tcp -i $GREEN_DEV -d 10.1.1.229 
--dport 23 -j DNAT --to 192.168.77.2:23 "
"/sbin/iptables -A FORWARD -p tcp -i $ORANGE_DEV -d 192.168.77.2 --dport 
23 -j ACCEPT"

so if anyone know what the heck this is doing please lemme know.

Evan
> If you are trying to access your resource by NAME, which then gets 
> resolved to an IP address, try putting a HOSTS entry on the firewall 
> that points to the needed IP address.  Then when the firewall responds 
> to requests for that name from the internal network, it points it at the 
> correct location.  Requests like this from outside should never arrive 
> at your firewall (unless it is the primary DNS server for your domain, 
> in which case you have a slightly different problem.
>
> This issue is not unique to any particular firewall, but to how a 
> network is set up.  I've had to do the above tip with IPCop as well.
>
> HTH, if not, then you are probably looking at tweaking iptables which 
> takes a bit to get your head around...
>
> Shawn
>
> Evan Brown wrote:
>   
>> Hi
>>
>> I'm not sure if anyone is experienced with the Smoothwall fire wall but 
>> I have one setup and running well although I have a small problem from a 
>> usability stand point. I need to connect from my green zone to the red 
>> zone using the red zone IP address. We are currently port forwarding 
>> from red to green and that works fine outside of the lan but when we on 
>> the lan we can't hit the red zone ip. Any help would be appreciated.
>>
>> Evan Brown
>>     


_______________________________________________
clug-talk mailing list
[email protected]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying

Reply via email to