SuSE 9.2 - firewall blocks internal network
I just upgraded to SuSE 9.2. I'm configuring my network, which looks like this:
(INet) -> ADSL -> 802.11g ))) (((Switch - - - - - - - - - - - -
Default Router: x.x.x.1
Linux has eth0 and eth1 (plugged into the switch)
Internal network has eth2 (plugged into the switch)
My SuSE 9.2 PC has two cards, eth0 and eth1. Eth0 is configured as the 'external' interface, while eth1 is configured as the internal interface.
What I would like to do is to configure SuSEfirewall2 so that it correctly blocks anything coming from the internet, but port 22. Also, internally, the linux box must serve samba and NFS.
The updated network service modules in YaST give you theoption to open the firewall port on either both devices, or just the one you want (I want the internal). This is not reflected to the network, basically:
1. If in YaST firewall module I open teh ports for smb, both the internal and external devices accept connections -> not good
2. If in YaST module for samba I open the ports for smb in the internal device, it doesn't work (nmap confirms) -> not good (Btw, with this configuration, in the firewall mode smb ports are *not* selected, even tho in the appropriate modules are).
my SuSEfirewall2 conf has FW_DEV_EXT and _INT correct, quickmode off, protect all running services and from internal network off:
## Type: string
# see comments for FW_SERVICES_EXT_TCP
FW_SERVICES_INT_TCP=" microsoft-ds netbios-dgm netbios-ns netbios-ssn"
Am I missing something?
(no, to create my script directly is not an option for me right now)
Basically, how to disable the firewall for the internal network completely, and leave on the external interface only?