> Thanks Charles, worked like a charm.  However, I don't see *how* it works.
> This notation suggest to me that all internal traffic is going over eth1,
> but I know it's not because I have them physically separated on different
> switches.
>
> INTERN_IF="eth1"
> INTERN_NET="192.168.1.0/24 192.168.212.0/24"
> INTERN_IP=192.168.1.1
>
> Is it smart enough that the presence of the second network in INTERN_NET
> automatically knows that it is assigned to eth2 and to use the address
> assigned to that interface as the gateway?
>
> Anyway, I knew in the back of my head I couldn't do it with one routable
> IP, but I thought I'd use the 'hit it with a hammer until it works'
> approach.

For details troll the mailing list archives...

The short version is INTERN_IF and INTERN_IP aren't really used by the
current firewall scripts, and are mainly historical anachronisms (try
looking for either in /etc/ipfilter.conf)...

Charles Steinkuehler
http://lrp.steinkuehler.net
http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas - 
http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink

------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to