[ILUG] Smoothwall and webservers

[HAMILTON,DAVID (HP-Ireland,ex2)]

If I remember smoothwall correctly, and I haven't used it in a little while,
what you are trying to do is impossible with the standard config.
You need to have an Orange interface which can then be seen by both the
green and red networks, acting as a DMZ.
They have some fairly basic rules in place to ensure that you can't do
anything which 'could' be considered stupid.
They will also roast you on their mailing list if you ask them to change it
:-).

	David.

-----Original Message-----
From: Stephane Dudzinski [mailto:stephane at antefacto.com]
Sent: Friday, February 08, 2002 9:06 AM
To: Nick Holder
Cc: Ilug
Subject: Re: [ILUG] Smoothwall and webservers


I don't know smoothwall at all, but as long as you setup your firewall
rules ok, you're fine.

You could nat your webserver, meaning assigning a dns entry outside
called by example : mywebserver.iptest.com then nat it to your internal
dns entry : mywebserver.internal.iptest.com

If i recall, smoothwall uses kernel 2.2 which i don't use anymore but
2.4 kernels with iptables do that brillantly.

Steph

On Fri, 2002-02-08 at 08:59, Nick Holder wrote:
> Hi there,
> 
> Well I have been faffing around for ages with my first smoothwall box and
> have been getting pretty much nowhere!
> 
> My current problem is getting our web sever to be seen through the
firewall
> box. I want to be able to type in the external ip of the firewall into my
> browser (from an external - dialup machine) and see our web site.
> 
> The setup:
> Smoothwall Version 0.9.9SE
> Eth0 (Green) attached to LAN with fixed internal IP
> Eth1 (Red) attached to internet with a fixed external IP
> 
> I have been banging numbers into smoothwall's setup and seeing no change
> when I try to connect
> 
> Any help you could give would be much appriciated and possibly save my
> sanity
> 
> Cheers
> 
> Nick
> 
> 
> ----------------------------------------------
> Another Pearl from the Microsoft category
> 
>  Windows didn't get as bad as it is overnight 
>  it took years of careful development.
> ----------------------------------------------
> 
> 
> 
> -- 
> Irish Linux Users' Group: ilug at linux.ie
> http://www.linux.ie/mailman/listinfo/ilug for (un)subscription
information.
> List maintainer: listmaster at linux.ie
-- 
______________________________________________
"Linux philosophy: Do it Yourself" L. Torvalds
Stephane Dudzinski       Systems Administrator
a n t e f a c t o            t: +353 1 8586009
www.antefacto.com            f: +353 1 8586014


-- 
Irish Linux Users' Group: ilug at linux.ie
http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
List maintainer: listmaster at linux.ie