What's the "correct" way to persuade SuSEfirewall2 in 10.2
to accept all forwarding?
I've looked in /etc/sysconfig/SuSEfirewall2 and found the
FW_FORWARD but even though I set it to "10.100.200.0/24,0/0"
it seems to drop some packages.
I have my server (with only one NIC) as the client PC's default gateway
and it's set up as a transparent squid proxy with a PREROUTING rule taking
care of redirecting port 80 to squids 3128. All other traffic should be
forwarded right through the system ('iptables -L FORWARD' should give
"Chain FORWARD (policy ACCEPT)" and nothing else).
I could ditch SuSEfirewall2 entirely and hack up my own little
firewall script but I'm kinda interrested in doing it the proper way.
I'd also like to find out how to restart the firewall w/o using yast.
Do I have to stop and start both SuSEfirewall2_init and
SuSEfirewall2_setup or is one enough?
- Peder
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
