[ previous ] [ next ] [ threads ]
 
 From:  "abdul aziz" <aaziz at justbooking dot com>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  DMZ Configuration
 Date:  Tue, 5 Oct 2004 11:22:27 +0500
(Re-send this msg on plain text)

Dear all,
 I want to setup a DMZ on my own LAN. I have cofigured m0n0 1.0 like this -
 
lan#192.168.1.1   
wan#192.168.10.174(DHCP)
DMZ#192.168.20.1
 
Pc on Lan can connect to internet but not to server on DMZ. 
firewall cannot ping server on DMZ, DMZ cannot ping FW.
We know the wiring is Ok because at one point the DMZ was pinging the FW.
 
what am i doing wrong?
 
NAT Outbound
Checked,  Enable advanced outbound NAT
 
Source                             Destination     Target   
192.168.20.0/24                   *                    *
 
 Proxy ARP
 
Network                       Description
192.168.20.0/24
 
Rules
 
DMZ interface  
  Proto     Source        Port         Destination       Port  
 
       *          DMZ net       *                     *                   * 

 
LAN interface  
  Proto     Source        Port         Destination       Port  
 
       *          LAN net       *                     *                   * 

 
 
# ifconfig
sis0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
ether 00:0a:e6:14:6a:d4
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.20.1 netmask 0xffffff00 broadcast 192.168.20.255
ether 00:0b:2b:0b:a5:d8
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
rl1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.10.174 netmask 0xffffff00 broadcast 192.168.10.255
ether 00:0b:2b:0b:ab:a1
media: Ethernet autoselect (100baseTX)
status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000 
ppp0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552
faith0: flags=8002<BROADCAST,MULTICAST> mtu 1500


Regards:
A.Aziz