/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
On 18 Jul 2000, [EMAIL PROTECTED] wrote:
> Sorry. mailhost.domain.edu is not the actual domain name of the mail
> server. But the domain name I'm using does resolve to a real IP address
> and that's the IP address that's used as the alias for our external
> interface on the firewall.
Okay. If "mailhost.domain.edu" is correctly pointing to your firewall machine,
why can't you ping it? Are you blocking ICMP in your ipchains rules? Are you
blocking that IP address? I suggest you try these tests with some sort of
logging on your firewall machine. A good tool is tcpdump or you can use the
logging in ipchains.
If you are using portfw to forward cetain packets (e.g. smtp) to another
machine, that will not affect other packets (e.g. icmp). Thus pinging
"mailhost.domain.edu" will ping the firewall machine and not the mail machine.
-- Michael Best
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
