Hi everyone. I posted this same message to the Software forum but never gotten any suggestions. Maybe Networking, this forum, is more suitable.

I have a web server behind a linux firewall. I can't get to it from the internet. When I enter my URL, say www.foo.com, it returns an error "The page cannot be displayed"

Following is a simple diagram(might not display correctly) of what I'm trying to do:
............
.Internet.
............
|
| 24.111.111.111
_____|_________
| firewall | 80 |
|-----------------------|
| HTTP | 8099 |
-----------|------------
| 192.168.1.1
|
--------|-------|-------
|
| 192.168.1.2
------|-----
| WWW | (my webserver)
------------

Following is my port forwarding rule:
Proto: TCP
Source Port: 80
Destination IP: 192.168.1.2
Destination Port: 80

If I run an ipchains -C (to test rules), with corresponding IP source/destination and port 80, it says "accepted". This means that my network is open for incoming(internet) request through port 80.

From my firewall, I'm able to ping say, yahoo.com, and to my 24.111.111.111 from the internet.

From my 192.168.1.1 network, I'm able to get to my webserver either through its IP address or FQDN. But when I'm in the internet, I can't get to my webserver.

What am I doing wrong? I'm kinda new with linux and setting up webservers.

Any suggestion or comments are welcome.

Thanks,
Angel

i use iptables rather than ipchains (and i'd suggest you do the same, since ipchains will probably become less popular in the future), but here's how i setup port forwarding in my firewall script for my webserver (which operates on port 81 rather than 80 - thank you SOOO much comcast :-P)

/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 81 -j DNAT --to 192.168.1.2:81

you'll have to enable IP MASQ, which it looks like you've already done. so with any luck setting up the port forwarding should be your final step. :-)