Can you fpaste your firewall rules? I would omit the actual public IP's for security sake. On Tue, Dec 13, 2011 at 8:53 AM, Laurent Wandrebeck <l.wandrebeck at gmail.com>wrote: > Hi, > > I'm using system-config-firewall (C6 x86_64, fully up to date) to > configure a gateway/firewall box. 2 nics, eth0 (configured as bridge0, > mtu 7200) connected to the lan, eth1 being connected directly to the > internet (public ip, mtu 1500). ssh port is open and accessible. nat is > working fine. I've put bridge0 as a trusted interface, eth1 is > masqueraded. I've put ports 20,21,80 as forwarded ports on eth1 to > lan machines. > Thing is nmap (and classical ways to access these protocols) say it's > closed. > I've tried to make 20,21,80 open and forwarded, to no avail. > > Could someone give me a hand ? > > Thanks, > Laurent. > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos > -- ------------------------------------------------------------------------------------------------------------------------------------- NOTICE: This message, including all attachments, is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering this message to its intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying "Received in error" and immediately delete this message and all its attachments. -------------------------------------------------------------------------------------------------------------------------------------