Ramírez Herrera, Jorge wrote:

>Hello everybody,
>
>I have a machine in DMZ and I can't access from wan.
>I can only access if I configure inbound nat from WAN to this machine. It's
>first time I can see it in a firewall.
>I configure in rules WAN -->any --> dmz net-->any and the only ting I get is
>a ping, but no tcp or udp ports. ¿?!!!
>Can anybody help me?
>
U have to add a rule on your wan interface to permit traffic to your DMZ.
Please note, the entry point to your complete network is only the WAN
port (if its connected ;-) )
Maybe:
pass in on WAN proto any from any port any to <DMZ NETWORK> port any

change "any" with anything u're like

- Alex