Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Jul 2002 16:23:55 -0300
From:      "Tobias P. Santos" <tpeixoto@widesoft.com.br>
To:        freebsd-net@FreeBSD.ORG
Subject:   Firewall and DMZ
Message-ID:  <3D3DAD4B.A6C6AEC@widesoft.com.br>

next in thread | raw e-mail | index | archive | help
Hello,
        I would like to implement a firewall to my DMZ network, but
I am not sure about how to do it.

              +----------+
              | Internet | 123.456.789.254
              +----------+
                   |
          +------------------+
          | FreeBSD Firewall | 123.456.789.4
          +------------------+
                   |
     +-------------+-----------+
     |             |           |
     |             |           |
     |             |           |
+----------+  +---------+  +--------+
|   DNS    |  |   Web   |  | E-mail |
|  Server  |  |  Server |  | Server |
+----------+  +---------+  +--------+
123.456.789.1 123.456.789.2 123.456.789.3


        I know it is pretty easy to build ipfw rules when we have natd
(for my internal network for example), but I haven't figured out how to
forward packets between interfaces on the same network with valid IP
addresses.
        In fact, I'd like to have the same behavior of Drawbrigde
(drawbridge.tamu.edu), but it seems somewhat deprecated.
        So, where should I start from? Is there a software to do that?

        If this is not the correct mailing list, please tell me the
right one and sorry for the incovenience.
        Thank you in advance,

--
Tobias P. Santos

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3D3DAD4B.A6C6AEC>