webserver/dns with private IPs

[Tomasz Wrona]

On Fri, 12 Oct 2001, manz wrote:

>      Anyway, our webserver is behind my firewall with
> private IPs and...

> our DNS(BIND 9) was installed  in our
> firewall.
!?

> My problem is my LAN and the Internet can't
> browse our webserver. But my LAN can browse the
> internet. I checked several howto's and still I was
> not successful. Any comment and suggestion is very
> appreciated.

You should allow traffic to webserver [and other servers] in FORWARD
chain.
If You have webserver on interface eth1 i dont know if DNAT will work on
the same interface.
If You have webserver on DMZ [ie. eth2] then add rules in FORWARD chain
to pass traffic to it.
If You use DNAT to webserver and use virtual services then there propably
you should add extra dns entries.


Regards
tw
-- 

----------------
 ck.tym.pl