DMZ Question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello everybody,

 

 

                             --------------------------

                             |                               |     WAN
(x.x.x.58/28, default gateway - x.x.x.49)

                             |       FC2           e0
|-------------------------- ISP

             LAN         |                               |

-----------------------|  e1                         |     DMZ

    10.0.1.x            |                        e2
|--------------------------

                             |                               |

                             |-------------------------|

I have 3 computers that need to have public addresses and their IP addresses
are:

A - x.x.x.50/28, DG - x.x.x.49

B - x.x.x.51/28, DG - x.x.x.49

C - x.x.x.55/28, DG - x.x.x.49

Now the problem is I do not understand how I will give access to these PCs
from public without putting these PCs on a different subnet. Some firewalls
such as sonicwall do not require an IP for the DMZ port. You can add any
number of IPs behind the DMZ and it works. How is that done? Is it possible
with Linux?

If I connect them on the DMZ interface, should they all be put in a
different subnet, probably with /29 bit mask? If I do it this way, should I
use iptables & DNAT or should/can I use just the "routing" in linux?

If you have a better way to do it, please let me know. Any help will be
greatly appreciated.

Thank you,

Deepak Seshadri

 


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux