🚀 go-pugleaf

hi

it looks like - i'm to stupid and i cannot get this config working. maybee
the reason is that my knowledge of routing is very bad. i hope you can help
me. here is a structure picture of what i want to do... my subnetmask is
255.255.255.240

Internet NIC (eth0) - ip 210.2.5.18
                       |
                 SuseFW2---------- DMZ NIC (eth1)
                       |                          210.2.5.19
                       |
NIC (eth2) - ip 210.2.5.25


1. Webserver1 (IP 210.2.5.20) and Webserver2 (IP 210.2.5.21) stand inside
the DMZ, behind eth1
2. Behind eth2 stands 2 diffrent Hardwarefirewalls of different companies -
and i want to configure a OnToOneNat, Direct Routing or whatever posible to
the HardwareFirewalls. Maybe the IP's 210.2.5.26 and 210.2.5.27.

my loveliest dreams are 2 DMZ's but i'm not shure if this is possible... the
real problems i have is - how to get the incoming packets from eth0 to the
eth1 and eth2 and vice versa. the funktion IP_FORWARD isn't working - or
bedder to say - i don't know why and how. i'm trying with the config script
of susefirewall2 and was unsuccessful. i read 2 books about firewall and
iptables but i cannot find any example with a dmz having official ip
adresses... i cannot work with internal ip's and port forwarding from one
official ip because different machines using the same ports (e.g.
webservers). config examples are absolutly welcome! i'm a newbie on linux!

if you have bedder ideas to solve my problem - tell me! i'm open for
"everything"...


Greetings
Alex