Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 Jan 2003 20:34:47 +0100
From:      Hanspeter Roth <hampi@rootshell.be>
To:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Split DNS, LAN, DMZ
Message-ID:  <20030110193447.GB60150@gicco.homeip.net>
In-Reply-To: <20030110191840.75386.qmail@mail.com>
References:  <20030110191840.75386.qmail@mail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
  On Jan 10 at 11:18, bsdaemon@mail.com spoke:

> Hello all
> 
> I am setting up a network at home, and I'd like the following configuration:
> 
> outside--DHCP-->firewall (trihomed)--(10 net)-->LAN
>                    |___>DMZ (private IP?)
> 
> Is this feasible?  I saw some references that said the DMZ has to be a public IP, and others that [I think] said it was possible to use a private IP for  the DMZ.  Could someone clear this up for me?

The DMZ may be in a private address space.
But if clients from outside should be able to connect to some hosts
in the DMZ they must be made available by a public address of yours
on the outside interface of the firewall. You can accomplish this by
NAT.

-Hanspeter

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030110193447.GB60150>