Simon Hobson wrote:
> wisnu dwi hidayat wrote:
> 
>> External $fw= 172.1.1.1 (eth0)
>> Internal1$fw  =  172.1.1.2 (eth1) to web server with public ip 172.1.1.3
>> Internal2 $fw=    60.1.1.1 (eth2) to mail server with public ip   60.1.1.2

> The first one is trickier - you have the same subnet on internal and 
> external interfaces which means you either have to bridge eth0 and 
> eth1 or use proxy arp.
> 

It is also silly to use different IP addresses for External and
Internal1; Use the same address and you save one of your public addresses.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to