On Tue, Jul 23, 2002 at 04:23:55PM -0300, Tobias P. Santos wrote:
> Hello,
> I would like to implement a firewall to my DMZ network, but
> I am not sure about how to do it.
>
> +----------+
> | Internet | 123.456.789.254
> +----------+
> |
> +------------------+
> | FreeBSD Firewall | 123.456.789.4
> +------------------+
> |
> +-------------+-----------+
> | | |
> | | |
> | | |
> +----------+ +---------+ +--------+
> | DNS | | Web | | E-mail |
> | Server | | Server | | Server |
> +----------+ +---------+ +--------+
> 123.456.789.1 123.456.789.2 123.456.789.3
>
>
> I know it is pretty easy to build ipfw rules when we have natd
> (for my internal network for example), but I haven't figured out how to
> forward packets between interfaces on the same network with valid IP
> addresses.
'Cause that's bridging, not routing.
> So, where should I start from? Is there a software to do that?
You can try to set up bridging. Or you can subnet,
+----------+
| Internet |
+----------+
| 123.456.789.254/25
|
| 123.456.789.129/25
+------------------+
| FreeBSD Firewall |
+------------------+
| 123.456.789.126/25
|
+-------------+-----------+
| | |
| | |
| | |
+----------+ +---------+ +--------+
| DNS | | Web | | E-mail |
| Server | | Server | | Server |
+----------+ +---------+ +--------+
123.456.789.1 123.456.789.2 123.456.789.3
Subnetting is probably the "more correct" and easier way to go if
you're not familiar with bridging.
> If this is not the correct mailing list, please tell me the
> right one and sorry for the incovenience.
This is more of a -questions question. Redirecting the thread.
--
Crist J. Clark | [EMAIL PROTECTED]
| [EMAIL PROTECTED]
http://people.freebsd.org/~cjc/ | [EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message
