well yes it can be a walkaround but i'm looking for something in firewall level. On 5/20/05, Johnny Hughes <mailing-lists@xxxxxxxxxxxx> wrote: > On Fri, 2005-05-20 at 22:14 +0800, Mark Quitoriano wrote: > > how can i do this? about my problem how can i tell firewall if the > > source is 10.0.0.1 and sending it to 10.0.0/24 he well send it to eth1 > > interface? > > > > there's no such thing as -j eth1 right? > > > > What I do is have an internal DNS server that does internal IPS for my > domain (it is listed as Primary, no secondaries, for my domain). > Internally, mail.hughesjr.com has the internal address .... externally > it real address. > > Internal clients point to the internal DNS server (and internal IP) ... > external clients point to the external IP. > > > > On 5/20/05, Mark Quitoriano <markquitoriano@xxxxxxxxx> wrote: > > > hi guys i got another problem... > > > > > > as i said the last post i used john's syntax for my iptables and it > > > worked fine outside the internet but my local user can't access it on > > > there browser. > > > > > > > BodyID:163248065.2.n.logpart (stored separately) > > _______________________________________________ > CentOS mailing list > CentOS@xxxxxxxxxx > http://lists.centos.org/mailman/listinfo/centos > > > -- Regards, Mark Quitoriano, CCNA http://www.atamanetworks.com