I've a problems with Webserver in the DMZ zone of my Networks.
I read book Web Server/DNAT and the webserver don't seem works.

My Config is
internal : 192.168.5.x
external : 192.168.4.x (yes, i know is a private adresses)
dmz : 192.168.6.x

I define the webserver adresse in networks (192.168.3.12/32)

I make following msquerading rules :

Dmz_Network__ -> All / All MASQ__External
Internal_Network__ -> All / All MASQ__External
Dmz_Network__ -> All / All MASQ__Internal
Serveur_Web -> All / All MASQ__External

The packet filter have been configurated like doc said...

include a following rule :

client : any
service : http
server : Serveur_Web
action : allow

Thanks

[ QUOTE ]
I've a problems with Webserver in the DMZ zone of my Networks.
I read book Web Server/DNAT and the webserver don't seem works.

My Config is
internal : 192.168.5.x
external : 192.168.4.x (yes, i know is a private adresses)
dmz : 192.168.6.x

I define the webserver adresse in networks (192.168.3.12/32)

I make following msquerading rules :

Dmz_Network__ -> All / All MASQ__External
Internal_Network__ -> All / All MASQ__External
Dmz_Network__ -> All / All MASQ__Internal
Serveur_Web -> All / All MASQ__External

The packet filter have been configurated like doc said...

include a following rule :

client : any
service : http
server : Serveur_Web
action : allow

Thanks


[/ QUOTE ]

Not sure I understand why you have DMZ: 192.168.6.X and then you are defining your webserver as 192.168.3.12

Did you define two different DMZ interfaces ?

Sorry, it's a error the Web server is 192.168.6.12

Not sure why you are using a masquerade rule. You need one for the DMZ to get out to the internet. However you need a NAT rule to allow your web server to serve pages. Make it:

ANY->external-interface->HTTP->Serveur_Web
This is a DNAT/SNAT rule not a masquerade

Assuming you mean the web server is 192.168.6.12 (since you said it is on the DMZ), you would need a DNAT rule and appropriate packet filter to allow users from external network to access the Web server.