Question for SuseFirewall2 experts

I installed Suse Linux 9.3 on my computer and the Firewall was
automatically setup for External zone. Works well on the Internet, but
the Firewall is preventing access to my LAN.

My network configuration is two Windows computers and this Linux
computer all plugged into my Linksys Router, which connects to my DSL
modem.


The default Firewall installation put my NIC in the External Zone. It
appear the Firewall is preventing access to my LAN.

QUESTION: Can I assign my NIC to BOTH zones at the same time
(External AND Internal?)


Any good sites with info on setting Firewall up in this configuration?
(The Novel info on the WEB seems to basically ignore this configuration.



Ed

On Sun, 07 Aug 2005 22:56:16 GMT, Ed <Huckleberry_REMOVE_@bigvalley.net> wrote:
>
> I installed Suse Linux 9.3 on my computer and the Firewall was
> automatically setup for External zone. Works well on the Internet, but
> the Firewall is preventing access to my LAN.
>
> My network configuration is two Windows computers and this Linux
> computer all plugged into my Linksys Router, which connects to my DSL
> modem.
>
>
> The default Firewall installation put my NIC in the External Zone. It
> appear the Firewall is preventing access to my LAN.
>
> QUESTION: Can I assign my NIC to BOTH zones at the same time
> (External AND Internal?)

Never same interface _EXT and _INT. But if you leave FW_DEV_EXT="eth0"
and set FW_TRUSTED_NETS to your LAN subnet (for example "192.168.1.0/24")
that should work. Are you using YaST2 to configure it or editing
/etc/sysconfig/SuSEfirewall2 (reading that file might provide some
enlightenment).

> Never same interface _EXT and _INT. But if you leave
> FW_DEV_EXT="eth0" and set FW_TRUSTED_NETS to your LAN subnet (for
> example "192.168.1.0/24") that should work. Are you using YaST2 to
> configure it or editing /etc/sysconfig/SuSEfirewall2 (reading that
> file might provide some enlightenment).
>

Thanks for that info. I have been pulling hair out trying to figure
out how to assign my one ethernet card to both Zones! So far, I have only
used YaST2 for the Firewall configuration. However, even though I am a
Linux newbie, I think I can check and edit the /etc/sysconfig/SuSEfirewall2
file. You certainly are right. For someone who knows what they are
looking at, it will probably be instructive. Would you like me to try to
post it here in this thread?




Ed