Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Sep 1998 17:09:29 -0700 (PDT)
From:      Doug White <dwhite@resnet.uoregon.edu>
To:        chas <panda@peace.com.my>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: How to use FBSD as a proxy between firewall and LAN. (or  shouldn't I ?)
Message-ID:  <Pine.BSF.4.03.9809151708560.19769-100000@resnet.uoregon.edu>
In-Reply-To: <3.0.32.19980915230005.00d6dacc@mail.peace.com.my>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 15 Sep 1998, chas wrote:

> Sorry to bother you all but having read the archives and the ORA
> firewall book, I'm still pretty clueless.
> 
> Trying to implement a firewall/network :
> 
>                                 |<--> Server Farm A
>                                 |
>                                 |<--> Server Farm B
> [INet]<--> Router <--> Firewall |
>                                 |<--> FBSD Proxy <-- LAN
>                                 |
>                                 |<--> free
> 
> The firewall is on a Sun box with a quad-NIC using commercial
> firewall software. The LAN has over 100 PCs.
> 
> Does it make sense to use a FreeBSD box as I have shown
> above to act as a Proxy (and also router) between the LAN
> and the Firewall ? Does this network layout make sense or
> have I lost the plot ? (not that I really understood it in
> the first place).

Looks OK to me.  

> To set up the FreeBSD proxy above, will it really require
> static routes for all the PCs between the LAN and the Firewall ?

No; run NATD on the FreeBSD box and you'll only need to allocate a single
IP to it.

Doug White                              | University of Oregon  
Internet:  dwhite@resnet.uoregon.edu    | Residence Networking Assistant
http://gladstone.uoregon.edu/~dwhite    | Computer Science Major


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.03.9809151708560.19769-100000>