Firehol Problem - Please Help
Andrei Verovski (aka MacGuru) <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, folks,
I have SuSE Linux server which acts as 2-interface router & firewall
with
firehol package for firewalling setup.
Basically I'm need to make local services running on local PC
192.168.0.16
over the internet (port forwarding).
Below is a part of firehol.conf
I have tried different things, like "router world2lan inface "$
{if_world}"
outface "${if_lan}" route mygvsv accept dst 192.168.0.16", swapping
"route
commands" in world2lan configuration, explicitly opening "mygvsv" ports
with "server mygvsv accept", etc., nothing worked.
Something very simple is missing but I could not figure out waht.
Any help is greatly appreciated. Thanks in advance.
-------------------------------------------------------
if_world="eth4"
if_lan="eth0"
intranet_ips="192.168.0.0/16"
#transparent_squid 3128 squid inface "${if_lan}"
transparent_proxy 80 3128 "squid root bin andrei" inface "${if_lan}"
src "${intranet_ips}"
# Video surveillance software.
client_mygvsv_ports="5548 5549"
server_mygvsv_ports="tcp/5548 tcp/5549"
nat to-destination 192.168.0.16 inface "${if_world}" proto tcp
dport "${client_mygvsv_ports}"
interface "${if_lan}" lan src "${intranet_ips}"
policy reject
# server "dns ftp samba squid dhcp http ssh icmp" accept
server all accept
client all accept
interface "${if_world}" world src not "${intranet_ips} $
{UNROUTABLE_IPS}"
protection strong 10/sec 10
server "ssh http https ftp dns smtp smtps pop3 pop3s sip" accept
server ident reject with tcp-reset
client all accept
router lan2world inface "${if_lan}" outface "${if_world}"
masquerade
route all accept
router world2lan inface "${if_world}" outface "${if_lan}"
route mygvsv accept
route ident reject with tcp-reset
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf