Also, if you are running dnscache on your LRP box, DO NOT specify your ISP's name servers in the dnsservers variable. The FTP server documentation has been updated to include this restriction. Errors Corrected With a masqueraded DMZ, the localdmz chain contained unneeded rules for client replies. All packets outbound from the DMZ passed through the dmzall chain before being passed through dmzext or dmzlocal . This made customization awkward.
Packets now pass through dmzext or dmzlocal before being passed to dmzall .
It is now only necessary to define these clients in the dmzclients file. The above problems are corrected in this updated version of the firewall script . If you are using a Windows system to download, it is a good idea to get the updated copy via ftp using binary mode so that the scripts doesn't get mangled with extra line feed characters. The above problem is corrected in this updated version of the seawall script . This script will pause after each display but the pause cannot be terminated by hitting the enter key.