[Security Firewall] Routing question

[Mitchell, Neill]

Hi.   I have got a Netscreen 5G VPN installed on my network at the insistance of a client we work with. My Mandrake firewall is configured with 3 interfaces - WAN, LAN on 192.168.1.0 and DMZ on 192.168.101.0.   The 5G is connected on its untrust side straight to our Cisco router out to the world. The trust side is connected to the DMZ interface on the MNF at 192.168.101.80. The network on the client's end is 84.9.62.0/24   My question is this. How do I get Remote Desktop traffic (port 3389) on the LAN to route through to the trust interface of the 5G in the DMZ?   I have tried the following accept rule but it doesn't seem to work:   Accept  LAN  DMZ:192.168.101.80  tcp 3389 84.9.62.0/24   Any help greatly appreciated.   Best regards Neill Mitchell Minuco Vigilize 31 Museum Street, London, WC1A 1LG T: +44 (0)20 7692 2649 F: +44 (0)20 7436 9955 http://www.minuco.com You have received this e-mail from Minuco. It is intended to be read by the addressee because it could contain confidential and privileged information (including any attachments). If you are not the person or organisation this e-mail was intended for please return it to the sender and delete it from your computer(s). You must not copy, distribute, disclose, or disseminate the contents of this e-mail or its attachments to any third party unless authorised by Minuco. It is the responsibility of the recipient to ensure that the forwarding, opening or use of the e-mail (and any attachments) will not adversely affect their systems or data. Please carry out appropriate virus checks. All rights reserved. The intellectual property in this e-mail and any attachments are vested solely in Minuco.     _____________________________________________________________________ This message has been checked for all known viruses by Minuco delivered through the MessageLabs Virus Scanning Service. For further infomation visit http://www.minuco.com or alternatively mail info@minuco.com.