🚀 go-pugleaf

Hello all,

I've a SuSE 8.0 installed as firewall for my internal network.
Due to my ADSL permanent connetion, I have in mind to "export" on
internet  http and ftp services.

All seems to work good, but I can reach my ftp (or http) server only
once from the internet (from a remote internet connection).When I close
the remote connection, in the way to get another connection I must
restart SuSEfirewall. Otherwise there is no way to reach my servers.

In the internal network everything is still working well under any
circumstace...
May be I take some mistake in the configuration, but I'm not able
to find were....

May some one help me?

Thank you in advance and sorry for my relative english! [;-)]

Here below the configuration of SuSEfirewall2
#SuSEfirewall2 configuartionn file
#
FW_DEV_EXT="ppp0"     #collegamento internet
#FW_DEV_EXT="dsl0"     #collegamento internet
FW_DEV_INT="eth1 ippp0"     #rete interna x.x.0.0 e isdn x.x.0.0
FW_DEV_DMZ="eth2"     #rete interna x.x.33.0
FW_ROUTE="yes"
FW_MASQUERADE="yes"
FW_MASQ_DEV="$FW_DEV_EXT"
FW_MASQ_NETS="0/0"     #accesso senza restriz. di tutte le reti
FW_PROTECT_FROM_INTERNAL="no"     #la rete interna � sicura... [;-)]
FW_AUTOPROTECT_SERVICES="yes" #sul firewall proteggiamo i servizi di rete
#
FW_SERVICES_EXT_TCP="123 5930:5940 ntp smtp"     #servizi disponibili sul fw
FW_SERVICES_EXT_UDP="ntp 123"            #servizi disponibili sul fw
FW_SERVICES_EXT_IP=""
#
FW_SERVICES_DMZ_TCP="20 21  80"    #servizi disponibili sulla dmz
#FW_SERVICES_DMZ_UDP="20 21"
FW_SERVICES_DMZ_IP=""
#
FW_SERVICES_INT_TCP="20 21 80 5933:5935"    #servizi disponibili sulla 
rete interna sicura
FW_SERVICES_INT_UDP="20 21"
FW_SERVICES_INT_IP=""
#
FW_TRUSTED_NETS="192.168.0.0/24"     #rete sicura (spero....)
#
FW_ALLOW_INCOMING_HIGHPORTS_TCP="no"
FW_ALLOW_INCOMING_HIGHPORTS_UDP="DNS"
#
FW_SERVICE_AUTODETECT="yes"
FW_SERVICE_DNS="no"
FW_SERVICE_DHCLIENT="no"
FW_SERVICE_DHCPD="no"
FW_SERVICE_SQUID="no"
FW_SERVICE_SAMBA="no"
#
#
FW_FORWARD=""
FW_FORWARD_MASQ="0/0,192.168.33.2,tcp,21 0/0,192.168.33.2,tcp,80"
#
#FW_REDIRECT="192.168.0.0/24,0/0,tcp,80,80 0/0,192.168.33.2,tcp,80,80"
FW_REDIRECT=""
#
# FW_LOG_*_ALL defaults to "no"
FW_LOG_DROP_CRIT="yes"
FW_LOG_DROP_ALL="yes"
FW_LOG_ACCEPT_CRIT="yes"
FW_LOG_ACCEPT_ALL="no"
FW_LOG="--log-level warning --log-tcp-options --log-ip-option 
--log-prefix SuSE-FW"
#
FW_KERNEL_SECURITY="yes"
#
FW_STOP_KEEP_ROUTING_STATE="yes"
#
FW_ALLOW_PING_FW="yes"
FW_ALLOW_PING_DMZ="yes"
FW_ALLOW_PING_EXT="no"
##
# END of rc.firewall
#
# EXPERT OPTIONS - all others please don't change these!                  #
FW_ALLOW_FW_TRACEROUTE="no"
#
FW_ALLOW_FW_SOURCEQUENCH="no"
#
FW_ALLOW_FW_BROADCAST="no"
FW_IGNORE_FW_BROADCAST="yes"
#
FW_ALLOW_CLASS_ROUTING="no"
#
#FW_CUSTOMRULES="/etc/sysconfig/scripts/SuSEfirewall2-custom"