(Re-send this msg on plain text)
Dear all,
I want to setup a DMZ on my own LAN. I have cofigured m0n0 1.0 like this -
lan#192.168.1.1
wan#192.168.10.174(DHCP)
DMZ#192.168.20.1
Pc on Lan can connect to internet but not to server on DMZ.
firewall cannot ping server on DMZ, DMZ cannot ping FW.
We know the wiring is Ok because at one point the DMZ was pinging the FW.
what am i doing wrong?
NAT Outbound
Checked, Enable advanced outbound NAT
Source Destination Target
192.168.20.0/24 * *
Proxy ARP
Network Description
192.168.20.0/24
Rules
DMZ interface
Proto Source Port Destination Port
* DMZ net * * *
LAN interface
Proto Source Port Destination Port
* LAN net * * *
# ifconfig
sis0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
ether 00:0a:e6:14:6a:d4
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.20.1 netmask 0xffffff00 broadcast 192.168.20.255
ether 00:0b:2b:0b:a5:d8
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
rl1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.10.174 netmask 0xffffff00 broadcast 192.168.10.255
ether 00:0b:2b:0b:ab:a1
media: Ethernet autoselect (100baseTX)
status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
ppp0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552
faith0: flags=8002<BROADCAST,MULTICAST> mtu 1500
Regards:
A.Aziz |