Re: firewalld and forwarding incoming external traffic to an internal host

HI Eric!

Am 22.01.24 um 20:51 schrieb Eric Garver:

You could move the masquerade from above edmz zone to this policy. IMO, it's more correct. Adding it to the zone means it will masquerade all traffic egressing zone edmz regardless of where it originates, e.g. idmz, public, internal, etc. Using this policy means only traffic from idmz will be masqueraded.

Yes, I'm afraid I have to agree with you, it's probably better to move the masquerading instruction to the policy idmz-2-edmz.

This looks good to me based on how I understand your topology. That being said, every network is a snowflake. :)

I'm glad you got it sorted out.

I managed it, but without your valuable tips it would have taken me a long time!

Best regards Django