Hi,

I've a Astaro 4 with LAN, DMZ (with one web serveur) and Web Access.

How configure for :
access to web server from Internet
access to web server from LAN
access to Internet from LAN only autorize somes protocols (SMPT, POP, IMAP, DNS, HTTP, HTTPS, SSH).

If someone can indicate to me how make NAT and packet filters rules.

Thank You

go through http://docs.astaro.org first. Especially ../guidebooks and ../guidbooks/setup are good points to start from.

Greetings
cyclops

Try these NAT rules:

FTP Any -> External_Interface__ / FTP None ftp.yourdomain.com
Internal_NAT Internal_Network__ -> All / All MASQ__External None
DMZ_NAT DMZ_Network__ -> All / All MASQ__External None
Webserver Any -> External_Interface__ / HTTP None webserver.yourdomain.com

These four rules shows both the Internal and DMZ networks being masqueraded, with SNAT paths in through to the FTP and web server. You can access both the FTP and web server from the Internal network by simply pointing your browser at the external IP address.

My assumption is that you are using two different RFC 1918 compliant private IP range class "C" subnets for your internal and DMZ nets, such as 192.168.1.xx for one and 192.168.2.xx for the other.

Give it a try.

Thank you [img]/images/graemlins/smile.gif[/img]