On 3/24/11 9:53 AM, Vieri Di Paola wrote:
> 
> --- On Thu, 3/24/11, Vieri Di Paola <[email protected]> wrote:
> 
>> If I setup eth0 and eth1 as routed interfaces (no bridge)
>> on "SW BOX 1" I need to do masquerading of the loc zone.
> 
> Or maybe not...
> 

Probably not -- use proxy ARP instead of a bridge.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to