firewall bridge , Vlan ?

"loong" <loong@xxxxxxxxxxx> · Mon, 9 Jun 2003 11:46:59 +0800

hi

is there anywhere install bridge firewall and install 
vlan
http://www.candelatech.com/~greear/vlan.html

so that my firewall can run like netscreen without using  
hug or switch to my webserver.

currently is
internet -- > eth0 firewall   eth1 -- 
>   hub ------> webserver 1

------> webserver 2

is that anywhere i install few network card in my firewall 
then

internet --->    eth0    
firewall   eth1 ---->    webserver 1

eth2 ----->   webserver 2
                                                     eth3 
----->  webserver 3

thanks

loong

  ----- Original Message ----- 
  From: 
  John Paul 
  To: George Vieira ; netfilter@xxxxxxxxxxxxxxxxxxx 

  Sent: Monday, June 09, 2003 11:35 
AM
  Subject: Re: Problem Found! - Firewall 
  Rule

  Thanks George. I have modified my network to 
  (10.10.0.0/24). 

  Now, I'am able to ping the machines inside the 
  network after connected to the VPN. The problem now is, I'm not able to 
  map/see machines in Network Neighborhood except the VPN server.

  Any clue?       

    ----- Original Message ----- 
    From: 
    George Vieira 
    To: John Paul ; netfilter@xxxxxxxxxxxxxxxxxxx 

    Sent: Friday, June 06, 2003 8:56 
    AM
    Subject: RE: Problem Found! - Firewall 
    Rule

    Your local IP is the same as the remote networks IP.. so how is the 
    local machine to know that 192.168.0.55 or 66 or 32 is on the 
    VPN!?

    The only way I know is to proxyarp the ppp device that the vpn is 
    running on.. I'm assuming it's PPTP so you could try this command when the 
    VPN comes up :
    echo 1 > 
    /proc/sys/net/ipv4/conf/$VPNDEV/proxy_arp

    and this must be done on the VPN 
    server too..
    I've never done it this way with a VPN.. but you 
    can only try it..

    I'm surprised that anything really works properly 
    the way you've done it because the firewall has 2 network devices with the 
    same IP range.

    Thanks,

    ____________________________________________
George 
    Vieira

    Citadel 
    Computer Systems Pty Ltd
    Systems 
    Manager
    georgev 
    AT citadelcomputer DOT com DOT au

    Citadel Computer Systems Pty Ltd

    Phone : +61 2 9955 
    2644
    HelpDesk: +61 2 9955 
    2698
    http://www.citadelcomputer.com.au

    -----Original Message-----
From: John Paul 
    [mailto:john@xxxxxxxxxxxxxxxxxxxx]
Sent: Friday, June 06, 2003 
    9:56 AM
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: 
    Problem Found! - Firewall Rule

    Hello Folks, its me again :(

    Below is my config. My problem is, I can connect to VPN but for some 
    reason, I cannot see machines inside the network after being connected. Can 
    somebody give me the simpliest firewall rule on this? just for me 
    to see the machines inside the network.

    Thanks!
    /JP