I am just starting to setup a DMZ, but I have a few questions on your setup,
the are noted below
>
>
> # Set EXTERN_IP to "DYNAMIC" if you need the rules to read the IP from the
> # interface, but you arn't using DHCP (ie PPPoE and dialup users)
> EXTERN_IP=PUBLIC IP
> ^^^^^^^^^^
What's the purpose of this entry? From what I see in the network.conf file,
the line above
should take care of business:
# External Interface IP number...the default should be fine for most folks
#eval EXTERN_IP=\"\${"$EXTERN_IF"_IPADDR:-""}\"
[snip]
>
> ## UDP Services open to outside world
> # Space seperated list: srcip/mask_dstport
> # NOTE: bootpc port is used for dhcp client
> EXTERN_UDP_PORTS="0/0_80"
>
And why do you have udp 80 open? Webservers use tcp.
>
> # TCP services open to outside world
> # Space seperated list: srcip/mask_dstport
> EXTERN_TCP_PORTS="0/0_80"
>
Good
I don't know that much about setting up a DMZ (yet) but this is what jumps
out at me as strange in the setup. I hope this is somewhat helpful.
Later
Tony
_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
