diff --git a/docs/FAQ.xml b/docs/FAQ.xml index 5eb3212d6..093bda49a 100644 --- a/docs/FAQ.xml +++ b/docs/FAQ.xml @@ -351,43 +351,8 @@ DNAT net loc:192.168.1.3:22 tcp 1022 works fine but when my local users try to connect to the server using the Firewall's external IP address, it doesn't work. - Answer: Let's assume the - following: - - - - External IP address is 206.124.146.176 on eth0. - - - - Server's IP address is 192.168.2.4 - - - - You can enable access to the server from your local network - using the firewall's external IP address by adding this rule: - - #ACTION SOURCE DEST PROTO DEST PORT(S) SOURCE ORIGINAL -# PORT DEST -DNAT loc dmz:192.168.2.4 tcp 80 - 206.124.146.176 - - If your external IP address is dynamic, then you must do the - following: - - In /etc/shorewall/params: - - ETH0_IP=`find_interface_address eth0` - - For users of Shorewall 2.1.0 and later: - - ETH0_IP=`find_first_interface_address eth0` - - and make your DNAT rule: - - #ACTION SOURCE DEST PROTO DEST PORT SOURCE ORIGINAL -# PORT DEST. -DNAT loc dmz:192.168.2.4 tcp 80 - $ETH0_IP + Answer: See FAQ 2b.