Date: Wed, 24 Jul 2002 16:23:37 +0200 From: fabrizio.fresco@netsiel.it To: "Tobias P. Santos" <tpeixoto@widesoft.com.br> Cc: freebsd-net@FreeBSD.ORG Subject: Re: Firewall and DMZ Message-ID: <3D3EB869.AFCFB908@netsiel.it> References: <3D3DAD4B.A6C6AEC@widesoft.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
"Tobias P. Santos" wrote:
>
> Hello,
> I would like to implement a firewall to my DMZ network, but
> I am not sure about how to do it.
>
> +----------+
> | Internet | 123.456.789.254
> +----------+
> |
> +------------------+
> | FreeBSD Firewall | 123.456.789.4
> +------------------+
> |
> +-------------+-----------+
> | | |
> | | |
> | | |
> +----------+ +---------+ +--------+
> | DNS | | Web | | E-mail |
> | Server | | Server | | Server |
> +----------+ +---------+ +--------+
> 123.456.789.1 123.456.789.2 123.456.789.3
>
> I know it is pretty easy to build ipfw rules when we have natd
> (for my internal network for example), but I haven't figured out how to
> forward packets between interfaces on the same network with valid IP
> addresses.
> In fact, I'd like to have the same behavior of Drawbrigde
> (drawbridge.tamu.edu), but it seems somewhat deprecated.
> So, where should I start from? Is there a software to do that?
>
> If this is not the correct mailing list, please tell me the
> right one and sorry for the incovenience.
> Thank you in advance,
Try to guess......
The easyest way is to create an alias on the firewall for the ip's of
the real servers and
use the fwd action with ipfw to redirect the traffic that you want to
the real servers.
Hope this is clear and what you are asking.
>
> --
> Tobias P. Santos
--------------------------------------------------------------------
CONFIDENTIALITY NOTICE
This message and its attachments are addressed solely to the persons
above and may contain confidential information. If you have received
the message in error, be informed that any use of the content hereof
is prohibited. Please return it immediately to the sender and delete
the message. Should you have any questions, please contact us by
replying to webmaster@telecomitalia.it.
Thank you
www.telecomitalia.it
--------------------------------------------------------------------
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3D3EB869.AFCFB908>