Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-02-02 Thread Zenny
Thanks Tom, Jeremy for pointing to FAQ2 which solved the issue. Thanks to Damiano for hinting about unNATed network configuration. Cheers, /z On 1/31/16, Damiano Verzulli wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Il 30/01/2016 17:55, Jeremy Baker ha

Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-31 Thread Damiano Verzulli
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Il 30/01/2016 17:55, Jeremy Baker ha scritto: > [...] Do you web servers resolve to the local address, or your > external address from within your network? [...] I would also add that: - - _IF_ you are _NOT_ NATting from LOC to DMZ and - - _IF_

Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-30 Thread Jeremy Baker
On 01/30/2016 11:39 AM, Tom Eastep wrote: > On 01/29/2016 10:55 PM, Zenny wrote: >> On 1/30/16, Tom Eastep wrote: >>> On 1/29/2016 10:58 AM, Zenny wrote: Hi, I am using 3-interface shorewall and working very well. However, I could not figure out how can

Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-30 Thread Tom Eastep
On 01/30/2016 08:55 AM, Jeremy Baker wrote: > On 01/30/2016 11:39 AM, Tom Eastep wrote: >> On 01/29/2016 10:55 PM, Zenny wrote: >>> On 1/30/16, Tom Eastep wrote: On 1/29/2016 10:58 AM, Zenny wrote: > Hi, > > I am using 3-interface shorewall and working very

Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-30 Thread Tom Eastep
On 01/29/2016 10:55 PM, Zenny wrote: > On 1/30/16, Tom Eastep wrote: >> On 1/29/2016 10:58 AM, Zenny wrote: >>> Hi, >>> >>> I am using 3-interface shorewall and working very well. However, I >>> could not figure out how can the users in LOC zone access the websites >>>

Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-29 Thread Zenny
On 1/30/16, Tom Eastep wrote: > On 1/29/2016 10:58 AM, Zenny wrote: >> Hi, >> >> I am using 3-interface shorewall and working very well. However, I >> could not figure out how can the users in LOC zone access the websites >> running in DMZ zone? >> >> Appending: >> >>

Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-29 Thread Tom Eastep
On 1/29/2016 10:58 AM, Zenny wrote: > Hi, > > I am using 3-interface shorewall and working very well. However, I > could not figure out how can the users in LOC zone access the websites > running in DMZ zone? > > Appending: > > Web(ACCEPT) locdmz:192.168.10.111 > > to rules didn'd do as

[Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-29 Thread Zenny
Hi, I am using 3-interface shorewall and working very well. However, I could not figure out how can the users in LOC zone access the websites running in DMZ zone? Appending: Web(ACCEPT) locdmz:192.168.10.111 to rules didn'd do as expected. Instead, trying to access the websites running in