From owner-freebsd-questions  Wed Mar  6 14:13:14 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from www1.mailru.com (www1.mailru.com [80.68.244.4])
	by hub.freebsd.org (Postfix) with ESMTP id C22FA37B405
	for <questions@freebsd.org>; Wed,  6 Mar 2002 14:13:05 -0800 (PST)
Received: by HotBOX.Ru WebMail v2.1 id g26MKfT98284           for ;
Date: Thu, 7 Mar 2002 01:20:41 +0300 (MSK)
Message-Id: <200203062220.g26MKfT98284@www1.mailru.com>
From: "A.Rakukin" <rakukin@pochtamt.ru>
To: Mark <mark@netchat.co.za>
Cc: questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset="koi8-r"
Content-Transfer-Encoding: 8bit
X-Mailer: Free WebMail HotBOX.ru
X-Originating-IP: [128.208.125.157]
Subject: Re: with and without firewall
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


Hello,

Thanks for your reply!


> The simplest option is to add the ip of the firewall 
> (2) to the router if you take the firewall offline.
> Just keep all the clients believing the firewall is
> still up.

That's what talked about. But external router either
sends packets to the external address of the firewall
(a) or to the hosts in the internal network directly
(b), right? To make both behaviours possible I need to
enable (b) and make firewall pick at its external
interface all packets, intended for the network to
which its internal interface belongs. How can I do it?
I guess NAT does not help here.

> I missed the second network range.

That was just an example, not my real address.

Thanks,
Alex


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message