Date: Tue, 23 Jul 2002 15:04:06 -0700 From: "Crist J. Clark" <crist.clark@attbi.com> To: "Tobias P. Santos" <tpeixoto@widesoft.com.br> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Firewall and DMZ Message-ID: <20020723220406.GD56146@blossom.cjclark.org> In-Reply-To: <3D3DAD4B.A6C6AEC@widesoft.com.br> References: <3D3DAD4B.A6C6AEC@widesoft.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 23, 2002 at 04:23:55PM -0300, Tobias P. Santos wrote:
> Hello,
> I would like to implement a firewall to my DMZ network, but
> I am not sure about how to do it.
>
> +----------+
> | Internet | 123.456.789.254
> +----------+
> |
> +------------------+
> | FreeBSD Firewall | 123.456.789.4
> +------------------+
> |
> +-------------+-----------+
> | | |
> | | |
> | | |
> +----------+ +---------+ +--------+
> | DNS | | Web | | E-mail |
> | Server | | Server | | Server |
> +----------+ +---------+ +--------+
> 123.456.789.1 123.456.789.2 123.456.789.3
>
>
> I know it is pretty easy to build ipfw rules when we have natd
> (for my internal network for example), but I haven't figured out how to
> forward packets between interfaces on the same network with valid IP
> addresses.
'Cause that's bridging, not routing.
> So, where should I start from? Is there a software to do that?
You can try to set up bridging. Or you can subnet,
+----------+
| Internet |
+----------+
| 123.456.789.254/25
|
| 123.456.789.129/25
+------------------+
| FreeBSD Firewall |
+------------------+
| 123.456.789.126/25
|
+-------------+-----------+
| | |
| | |
| | |
+----------+ +---------+ +--------+
| DNS | | Web | | E-mail |
| Server | | Server | | Server |
+----------+ +---------+ +--------+
123.456.789.1 123.456.789.2 123.456.789.3
Subnetting is probably the "more correct" and easier way to go if
you're not familiar with bridging.
> If this is not the correct mailing list, please tell me the
> right one and sorry for the incovenience.
This is more of a -questions question. Redirecting the thread.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020723220406.GD56146>