Friday, January 23, 2009

Ping DMZ from Inside

Yesterday, when i was trying my NTP in debian, i realized that i cannot ping DMZ from inside, then i went to do some research, and found out that i have to add the following command highlighted in red! 192.168.0.0 mean that any ip addresses that try to talk to the destination, they will check whether are they in the same network by using the subnet mask 255.255.255.0 to check the ip addresses !

After which, i try to ping from Inside to DMZ and it's work ! Then i try to ping from DMZ to inside, it denied by pix because of the security level i set for both DMZ and inside. Inside have higher security level, thus DMZ unable to ping !


No comments: