Hello.

I have problems setting up our masquerading firewall...

I have two subnets, 192.168.1.0/24 and 192.168.2.0/24. They belong to two 
different departments, dep1 and dep2.
One Linux box should act as firewall, and using a very basic setup, everything 
works fine. I can reach Internet from both subnets without problems.
Now we would like the masquerading firewall to route traffic from dep1 through 
eth0, making all packets appear to come from dep1fw.epani.se,  and all traffic 
from dep2 through eth0:0, which name is dep2fw.epani.se.
This is the part I cannot get to work.

My "basic" setup looks like:

# Dep1
/sbin/ipfwadm -F -a m -b -P tcp -S 192.168.2.0/24 -D 0.0.0.0/0 0:65535
/sbin/ipfwadm -F -a m -b -P udp -S 192.168.2.0/24 -D 0.0.0.0/0 0:65535

#Dep2
/sbin/ipfwadm -F -a m -b -P tcp -S 192.168.1.0/24 -D 0.0.0.0/0 0:65535
/sbin/ipfwadm -F -a m -b -P udp -S 192.168.1.0/24 -D 0.0.0.0/0 0:65535

I have tried to add "-W eth0:0" to force packets to go through eth0:0 but that 
didn't work at all.
Trying to add -V <ip# of eth0:0> masquerades all packets to <ip# of eth0>.

I have read the documents I have found, and searching the net didn't give me 
any useful information.

Any help appriciated.

        /Magnus

-----------------------------------------------------------
Magnus M�rtensson, Unix/NT administrator   Epani Systems AB

[EMAIL PROTECTED]      http://www.dash.hh.se/~varg

Reply via email to