Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 4 Dec 2015 13:20:52 +0100
From:      Julien Cigar <jcigar@ulb.ac.be>
To:        freebsd-questions@freebsd.org
Subject:   redundant firewall
Message-ID:  <20151204122052.GH13477@mordor.lan>

next in thread | raw e-mail | index | archive | help

--mtfogggI1YmpIpmy
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello,

I bought 2 Soekris 6501 in order to setup a redundant firewall (with
Freebsd 10, CARP, and PF).=20
Let's say I don't need remote access to each individual boxes from the=20
WAN side, I wondered if it's really necessary to bind "real" IPs to=20
each interface involved in the CARP alias?

I'm asking this because I don't have enough public IPs...

Thanks!
Julien

--=20
Julien Cigar
Belgian Biodiversity Platform (http://www.biodiversity.be)
PGP fingerprint: EEF9 F697 4B68 D275 7B11  6A25 B2BB 3710 A204 23C0
No trees were killed in the creation of this message.
However, many electrons were terribly inconvenienced.

--mtfogggI1YmpIpmy
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=zlHe
-----END PGP SIGNATURE-----

--mtfogggI1YmpIpmy--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20151204122052.GH13477>