RE: [Security Firewall] Configuration with ONLY 1 PUBLIC IP

[Jim]

Hello Max,

Since your router will use your only public IP, create a DMZ in your ROUTER
first and point it to the WAN card on the firewall.  I would make them like
this:

LAN -- 192.168.0.x
DMZ -- 192.168.1.x
WAN -- 192.168.2.x

Point your router's DMZ server to 192.168.2.1 or whatever you make your
firewalls WAN address.

Now create some masquerading rules to pass the traffic from the various
zones:

Masqueraded Network:  192.168.0.0/24
Through Interface: eth2
Optional Network/Host: 0.0.0.0/0
Source Address (SNAT) optional: --

Masqueraded Network:  192.168.1.0/24
Through Interface: eth2
Optional Network/Host: 0.0.0.0/0
Source Address (SNAT) optional: --

Try that.

Slainte!

Jim McCormick
Cencore


-----Original Message-----
From: security-firewall-owner@linux-mandrake.com
[mailto:security-firewall-owner@linux-mandrake.com]On Behalf Of Massimo
Caranchini
Sent: Monday, April 11, 2005 11:44 AM
To: security-firewall@linux-mandrake.com
Subject: [Security Firewall] Configuration with ONLY 1 PUBLIC IP



Hi,

I'd like to configure a MNF machine to manage 3 zones: LAN, DMZ and LAN
Iìve only 1 Public IP.
How can i set the range of ip for the LAN and DMZ?

Should I use a modem or a router ?

Please help!

Max



____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________