I'd recommend getting firewall builder, setting it up as you want, then insoecing /etc/sysconfig/iptables to see the rules created. http://www.fwbuilder.org/ Johnny Hughes wrote: > On Fri, 2005-05-20 at 22:14 +0800, Mark Quitoriano wrote: > >>how can i do this? about my problem how can i tell firewall if the >>source is 10.0.0.1 and sending it to 10.0.0/24 he well send it to eth1 >>interface? >> >>there's no such thing as -j eth1 right? >> > > > What I do is have an internal DNS server that does internal IPS for my > domain (it is listed as Primary, no secondaries, for my domain). > Internally, mail.hughesjr.com has the internal address .... externally > it real address. > > Internal clients point to the internal DNS server (and internal IP) ... > external clients point to the external IP. > > > >>On 5/20/05, Mark Quitoriano <markquitoriano at gmail.com> wrote: >> >>>hi guys i got another problem... >>> >>>as i said the last post i used john's syntax for my iptables and it >>>worked fine outside the internet but my local user can't access it on >>>there browser. >>> > > > > ------------------------------------------------------------------------ > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos