Hallo Linuxer,
kann mir jemand sagen wie ich die SuSEFirewall2 konfigurieren muss damit ich über mein Linux-Gateway von meinem WinXP-Rechner mit Kazaa eine Verbindung herstellen kann?
Benutze SuSE Linux 8.0 mit Squid als Proxy und der Firewall als Internet-Gateway (195.255.255.1) und will von meinem XP-Rechner (195.255.255.2) Kazaa benutzen, bekomm aber keine Verbindung.
Ich nehme an das IP Masq nicht richtig funktioniert - weiss aber nicht woran es liegt - hier die Configdatei der Firewall:
FW_DEV_EXT=„ippp0“
FW_DEV_INT=„eth0“
FW_DEV_DMZ=""
FW_ROUTE=„yes“
FW_MASQUERADE=„yes“
FW_MASQ_DEV="$FW_DEV_EXT"
FW_MASQ_NETS=„0/0“
FW_PROTECT_FROM_INTERNAL=„no“
FW_AUTOPROTECT_SERVICES=„no“
FW_SERVICES_EXT_TCP=„1214 ssh“
Common: domain
FW_SERVICES_EXT_UDP=""
Common: domain
For VPN/Routing which END at the firewall!!
FW_SERVICES_EXT_IP=""
Common: smtp domain
FW_SERVICES_DMZ_TCP=""
Common: domain
FW_SERVICES_DMZ_UDP=""
For VPN/Routing which END at the firewall!!
FW_SERVICES_DMZ_IP=""
Common: ssh smtp domain
FW_SERVICES_INT_TCP=""
Common: domain syslog
FW_SERVICES_INT_UDP=""
For VPN/Routing which END at the firewall!!
FW_SERVICES_INT_IP=""
FW_TRUSTED_NETS=""
Common: „ftp-data“, better is „yes“ to be sure that everything else works
FW_ALLOW_INCOMING_HIGHPORTS_TCP=„yes“
Common: „DNS“ or „domain ntp“, better is „yes“ to be sure …
FW_ALLOW_INCOMING_HIGHPORTS_UDP=„DNS“
FW_SERVICE_AUTODETECT=„yes“
Autodetect the services below when starting
If you are running bind/named set to yes. Remember that you have to open
port 53 (or „domain“) as udp/tcp to allow incoming queries.
Also FW_ALLOW_INCOMING_HIGHPORTS_UDP needs to be „yes“
FW_SERVICE_DNS=„no“
if you use dhclient to get an ip address you have to set this to „yes“ !
FW_SERVICE_DHCLIENT=„no“
set to „yes“ if this server is a DHCP server
FW_SERVICE_DHCPD=„no“
set to „yes“ if this server is running squid. You still have to open the
tcp port 3128 to allow remote access to the squid proxy service.
FW_SERVICE_SQUID=„yes“
set to „yes“ if this server is running a samba server. You still have to open
the tcp port 139 to allow remote access to SAMBA.
FW_SERVICE_SAMBA=„yes“
FW_FORWARD=""
FW_FORWARD_MASQ=""
FW_REDIRECT=""
FW_LOG_DROP_CRIT=„yes“
FW_LOG_DROP_ALL=„no“
FW_LOG_ACCEPT_CRIT=„yes“
FW_LOG_ACCEPT_ALL=„no“
FW_KERNEL_SECURITY=„yes“
FW_STOP_KEEP_ROUTING_STATE=„no“
FW_ALLOW_PING_FW=„yes“
FW_ALLOW_PING_DMZ=„no“
FW_ALLOW_PING_EXT=„no“
Kennt sich jemand aus ???
Danke für die Hilfe!
HEin