Multiple firewalls

Multiple firewalls

[darkstar]

I have two seperate iptables firewalls for two lines for our
company.Both machines have two network cards.
Would it be advisable to combine the two into one machine with three
cards..???

Thanks

Re: Multiple firewalls

[Roy Sigurd Karlsbakk]

On Wednesday 11 September 2002 15:06, darkstar wrote:
> I have two seperate iptables firewalls for two lines for our
> company.Both machines have two network cards.
> Would it be advisable to combine the two into one machine with three
> cards..???

I beleive I'd do that to simplify routing & al.

one nic for WAN 1
one for WAN 2
one for company LAN
and one for the DMZ

:-)

roy

-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: Multiple firewalls

[Antony Stone]

On Wednesday 11 September 2002 2:06 pm, darkstar wrote:

> I have two seperate iptables firewalls for two lines for our
> company.Both machines have two network cards.
> Would it be advisable to combine the two into one machine with three
> cards..???

What are you trying to do with the two external links ?

How have you got your internal network set up ?

Is there any sort of redundancy / load balancing / failover going on here ?

Antony.

-- 

There are only 10 types of people in the world:
those who understand binary notation,
and those who don't.

Re: Multiple firewalls

[Antony Stone]

On Wednesday 11 September 2002 4:12 pm, darkstar wrote:

> On Wed, 2002-09-11 at 16:07, Antony Stone wrote:
> > On Wednesday 11 September 2002 2:06 pm, darkstar wrote:
> > > I have two seperate iptables firewalls for two lines for our
> > > company.Both machines have two network cards.
> > > Would it be advisable to combine the two into one machine with three
> > > cards..???
> >
> > What are you trying to do with the two external links ?
> >
> > How have you got your internal network set up ?
> >
> > Is there any sort of redundancy / load balancing / failover going on here
> > ?
> No just two simple firewalls going into a internal network, no fail over
> and no load balancing

In that case I agree with Roy.

1 interface for ext1
1 interface for ext2
1 interface for int LAN
1 interface for DMZ

It'll give a good opportunity to play with iproute2 as well :-)

How are your internal clients set up to route to the Internet at present ?   
What determines whether they go via ext1 or ext2 ?

Antony.

-- 

There are two possible outcomes.

If the result confirms the hypothesis, then you've made a measurement.
If the result is contrary to the hypothesis, then you've made a discovery.

 - Enrico Fermi