Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 7 Aug 2003 09:59:18 +0200 (CEST)
From:      Andre Rein <ar@g23.org>
To:        freebsd-net@freebsd.org
Subject:   Firewall with RFC1918 transfer network 
Message-ID:  <20030807094647.X77217@juergen.edv-winter.de>

next in thread | raw e-mail | index | archive | help
Hi,

I set up a Firewall for our official Network and use a RFC1918 conform
transfer network to communicate to the router.

Here are my interfaces:

fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
  inet 192.168.55.74 netmask 0xfffffffc broadcast 192.168.55.75
fxp1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
  inet 195.226.65.125 netmask 0xffffffc0 broadcast 195.226.65.127
vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
  inet 10.0.0.126 netmask 0xffffff00 broadcast 10.0.0.255

My routing table:

default            192.168.55.73      UGSc        1   822551   fxp0
10/24              link#3             UC          2        0    vr0
10.0.0.65          00:50:ba:fb:dc:13  UHLW        1    42895    vr0    473
10.0.0.254         00:60:b0:6b:08:f3  UHLW        1     1428    vr0    694
127.0.0.1          127.0.0.1          UH          0     2904    lo0
192.168.55.72/30   link#1             UC          3        0   fxp0
192.168.55.73      00:0c:ce:6c:de:53  UHLW        1        0   fxp0   1023
192.168.55.74      00:60:b0:67:e8:01  UHLW        0        2    lo0
192.168.55.75      ff:ff:ff:ff:ff:ff  UHLWb       0        4   fxp0
195.226.65.64      ff:ff:ff:ff:ff:ff  UHLWb       0       53   fxp1 =>
195.226.65.64/26   link#2             UC         19        0   fxp1
195.226.65.65      00:60:97:b8:7f:89  UHLW        0    48419   fxp1   1098
195.226.65.66      00:60:97:b8:7f:89  UHLW        0      133   fxp1    160
195.226.65.67      00:60:97:b8:7f:89  UHLW        0        6   fxp1    161
....

       fxp1 		   fxp0
|DMZ|--------|Firewall|-------------|Router|-----------|INET|
                 |
                 |
                 |  vr0
                 |
                 |
                 -
              back network
                 _


Everything works fine from my official network to the outside and from the
outside to my onet, except the firewall itself.She uses the ip
192.168.55.74 to communicate to the outside.

Is there any way to tell her that she have to use her oip 195.226.65.125
from fxp1?

greetings

Andre Rein

-- 

"And some greetings from the Toaster"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030807094647.X77217>