Re: Reach dmz host from within dmz zone with public ip address
Tuomo Soini <[email protected]>
| Newsgroups | gmane.comp.security.shorewall |
|---|---|
| Organization | Foobar Oy |
| Message-ID | <[email protected]> |
On Tue, 26 Oct 2021 07:49:25 +0000 "Nicola Ferrari (#554252)" <[email protected]> wrote: > We can reach webserver without any issue using public ip 1.2.3.4 from > loc and net zone, but not from dmz itself. > (Connection goes timeout) > > Also, dmz host can surf any other net host, except from its own > public ip address. > > shorewall show log doesn't show anything interesting.. > > What am I missing? https://shorewall.org/FAQ.htm#faq2 Because you likely have limited number of servers in dmz, you can give your names proper internal addresses by setting their real (not public) addresses in /etc/hosts on all servers so that packets won't go to firewall. -- Tuomo Soini <[email protected]> Foobar Linux services +358 40 5240030 Foobar Oy <https://foobar.fi/>