Sorry guys if this has made it before to the list, I just subscribed.

Here is my situation:

ISP Gateway: 111.111.111.253
My gateway : 111.111.111.254

subnets routed from ISP to 111.111.111.254 : 222.222.222.144/29,
333.333.333.192/27 and 444.444.444.128/26

I have three internal networks that I don't want them to see each other
but I want a way of seeing them all: 192.168.3.0/24, 192.168.4.0/24 and
192.168.253.0/24

all these internal networks are running either web, mail or other kind
of services that needs to have one to one nat with a public address.

now I'm running as follows:

first linux box:

        eth0: 111.111.111.254
        eth1: 222.222.222.145, 333.333.333.193 and 444.444.444.129
        
        no protection at all, don't know how to do it

second liunux box:
        eth0: all the above public IP addresses
        eth1: 192.168.3.1, 192.168.4.1, 192.168.253.1
        
        shorewall is doing all the natting and dnatting ..etc.

this setup is working fine except not able to protect the first box.

The question is: Is there a way in shorewall setup to do all with one
box, or if not, how to protect the first box and keep the traffic
flowing?

Thanks for any advises in advance.

Ibrahim Hamouda


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to