Re: no way to get out
On Sun, Apr 04, 2004 at 11:12:33PM +0300, Eddy Petrisor wrote:
> I made it with firewall builder, as I found it more suitable for myself
> as a beginer. Everything works ok for the users behind the firewall
> (private class addresses) but from the server I can't access the
> internet, nor the internal network...
>
The rule you want would have your firewall object in the source
column, "Any" in the destination column, and "Any" or whatever
services you want to allow out from your server/firewall in the
service column, with Action set to "Accept", of course. If you want
to browse the 'net from the firewall itself, make sure to allow DNS
queries out from that box (there is a predefined group for that in
fwbuilder).
Using the firewall object itself in the source column with "Any" in
the destination column will allow traffic originating on your
firewall to go anywhere, internal or out to the Internet. If you
wanted to restrict traffic based on interface, you would have to use
the interface object in the source column.
BTW, connections originating from the firewall traverse iptable's
OUPUT chain.
HTH,
Doug
Reply to: