All of lore.kernel.org
 help / color / mirror / Atom feed
From: lars@segv.dk (Lars Munch)
To: lartc@vger.kernel.org
Subject: Re: [LARTC] 2-NIC DMZ?
Date: Mon, 28 Oct 2002 18:27:20 +0000	[thread overview]
Message-ID: <marc-lartc-103584174415598@msgid-missing> (raw)
In-Reply-To: <marc-lartc-103582233922684@msgid-missing>

Hi

AFAIK, you can do all of this by using FIAIF:

http://fiaif.fugmann.dhs.org/

which is a VERY nice and highly customizable script for setting up an
iptables based firewall. It has traffic shaping too.

Regards
Lars Munch

On Mon, Oct 28, 2002 at 11:27:37AM -0500, Justin Richer wrote:
> Hi all,
> 
> I have two static IPs from my ISP. I would like one of these IPs to be
> directed to my desktop box all the time, and the other to be directed to a
> DHCP-served NAT network. I've nearly gotten it working using iptables and
> iproute2, but one problem is that i would like packets coming from my
> desktop box via the firewall to be printed with my desktop's external IP.
> They are currently being seen as from the NAT-hosted IP, which is the main
> IP address of the firewall box's external NIC. My setup looks like this:
> 
>  DSL Bridge -> [eth0] Firewall [eth1] -> 8-port-switch -> static desktop
>                                                         \-> (NAT cloud)
> 
> is it possible to send packets from the firewall looking like they came from
> a different external IP address based on which internal IP they were routed
> from? it seems to me it really should be possible to do ... just, how?
> 
> Thanks,
>   -- Justin
> 
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

  reply	other threads:[~2002-10-28 18:27 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-10-28 16:27 [LARTC] 2-NIC DMZ? Justin Richer
2002-10-28 18:27 ` Lars Munch [this message]
2002-10-28 21:06 ` Lars Munch
2002-10-28 22:05 ` Ken Price
2002-10-28 22:33 ` Justin Richer

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=marc-lartc-103584174415598@msgid-missing \
    --to=lars@segv.dk \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.