Shorewall users - Feb 2004 - access to service not running on firewall

Hi all,
I have mail server in internal net and a line in /etc/shorewall/rules
DNAT  net    loc:192.168.5.1:25    tcp    25
so the firewall external interface 194.250.138.100 port 25 can be contacted
from Internet zone.
Is it possible the external interface port 25 to be contacted from interanl
zone ( 192.168.5.0/24).
The reason for this is the same settings for e-mail clients for notebooks at
work/home.
Thanks for advice.
Petr Novak



---
Odchozí zpráva neobsahuje viry.
Zkontrolováno antivirovým systémem AVG (http://www.grisoft.cz).
Verze: 6.0.577 / Virová báze: 366 - datum vydání: 3.2.2004

On Thursday 05 February 2004 08:09 am, Petr Novák wrote:
> Hi all,
> I have mail server in internal net and a line in /etc/shorewall/rules
> DNAT  net    loc:192.168.5.1:25    tcp    25
> so the firewall external interface 194.250.138.100 port 25 can be contacted
> from Internet zone.
> Is it possible the external interface port 25 to be contacted from interanl
> zone ( 192.168.5.0/24).
> The reason for this is the same settings for e-mail clients for notebooks
> at work/home.
This is Shorewall FAQ #2.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net