http and icmp rules not working (SOLVED)

[IT Asitis]

Hi,

i have the same setup for internal, dmz1 and dmz2. However i am able to surf and ping via internal but not via DMZ1 or DMZ2. is there something special needed there?

if i have the rule " any any ip allow " on those interfaces everything is fine, i just dont want that since i want to restrict traffic as much as possible.

Security levels

internal 100

DMZ1 60

DMZ2 50

I would appriciate all the help i can get.

/Hilmar

[IT Asitis]

Now it works.

I added a rule fro DNS (tcp/udp Domain) and then everything started to work

maby it was not needed for internal since the dns server is in that network?

anyway this is solved. Thanks alot for your input guys.

/Hilmar