Date: Mon, 19 Nov 2001 16:18:18 -0800 From: "Crist J. Clark" <cristjc@earthlink.net> To: Zak Johnson <zakj@fenris.cc> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Complex routing for a firewall Message-ID: <20011119161818.V69555@blossom.cjclark.org> In-Reply-To: <20011119220504.GA3048@loki.intra>; from zakj@fenris.cc on Mon, Nov 19, 2001 at 05:05:04PM -0500 References: <20011119220504.GA3048@loki.intra>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Nov 19, 2001 at 05:05:04PM -0500, Zak Johnson wrote:
> I am having some trouble setting up routing for my (admittedly strange)
> network. I control x.x.165.232/29. My gateway (controlled by my ISP)
> is x.x.164.1. My intended setup:
>
> ISP Gateway (x.x.164.1)
> |
> firewall rl0 (inet x.x.165.233 netmask 255.255.254.0)
> firewall rl1 (inet x.x.165.234 netmask 255.255.255.248)
> |
> servers (inet x.x.165.235-237 netmask 255.255.255.248)
This isn't a "complex routing" problem. What you are trying to do is
incorrect. You are saying x.x.165.232/29 range of addresses somehow
exist on _both_ networks connected to rl0 and rl1.
Not knowing exactly how your ISP is routing things, I would still
think you are not expected to be routing your network at all. You
probably want to do bridging.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011119161818.V69555>