Hi,
I have a simple problem allowing protecting my DMZ network and also allowing to access the internet.
I made a diagram to explain the easily my configuration.
Basically idea is to block all traffic from Internet to DMZ zone but allow some ports
for example
First Drop all “chain=forward action=drop in-interface=ether1 out-interface=ether3”
and then allow to one server in DMZ some ports
“chain=forward action=accept protocol=tcp dst-address=205.203.243.18 in-interface=ether1 out-interface=ether3
dst-port=443,80,25”
This configuration does to job except one problem I also block internet connection to my servers in DMZ zone.
And I want server to allow to access the internet.
could you explain me the configuration you made to create the dmz .
I have the same scenario ISP , i create a private network , i masquerade that network and i use the isp gateway.
I can not create a DMZ , i don’t wont to protect the dmz!
Maybe for you the best solution would be to NAT your DMZ.
