Should I use internal zone?

Hello,

My laptop is behind the ISP provided routeur. Only today did I notice that in Yast firewall I have set the interface at External zone.
However I didn’t have any problem in the last few months or even a year, till today I want to forward a few ports. I have set it up in routeur and set it up in YAST firewall “custom rules” but still the port seemed to be closed.

So I changed my laptop interface to internal zone and reboot, now the port seemed to be open as testing shows.

I recently also set up samba with SUSE to let my android phone browse my laptop files but failed to connect. I haven’t got the time to look at the problem either yet.

Now I wonder, should I use internal zone to be able to use “port forwarding” or “samba share” with my phone in the same LAN?

It seemed to me interface at external zone works mostly well too.

On 2014-09-13 18:36, bonedriven wrote:

> It seemed to me interface at external zone works mostly well too.

If you use “internal interface” the firewall simply trusts that
interface and closes very few things. As “external interface” it closes
everything, and you have to explicitly open what you need. Thus it is
safer, but more difficult to setup and use…


Cheers / Saludos,

Carlos E. R.
(from 13.1 x86_64 “Bottle” at Telcontar)

On Sat, 13 Sep 2014 16:36:01 +0000, bonedriven wrote:

> Now I wonder, should I use internal zone to be able to use “port
> forwarding” or “samba share” with my phone in the same LAN?

The zones are typically used only if you have more than one network
interface and if the system is being used as a router.

I leave mine set at the default (external zone) and open ports as needed.

Jim


Jim Henderson
openSUSE Forums Administrator
Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

Thank you for the reply. I’ve changed back to external zone, and managed to open the ports I wanted to