OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Asenchi (asenchiasenchi.com)
Date: Wed Apr 03 2002 - 10:16:31 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    hello,

    i am somewhat new at fbsd, and i am setting up a firewall for a network. I
    have a question about configuring three nics to handle dmz stuff along with
    the internal network.

    here is my setup:

    INTERNET -> [oif=vr0 1.1.1.1] -> [iif1=xl0 10.10.0/24] -> NETWORK
                            |
                    [iif2=rl0 10.10.1/24] -> DMZ (Webserver/Email/FTP)

    Here is how my configuration is setup:

    I have IPFW built into the kernel. Right now I have built my own
    rc.firewall file and am using that. I also have natd running and enabled in
    rc.conf.

    I guess I don't know what else you would need, if you want me to send along
    my configurations I can do that.

    Here is my question. How do I redirect incoming packets that want to go to
    my website to my DMZ side of the network? I have read about -redirect_port
    | -redirect_address but really don't understand how that will filter the
    traffic. I need to read a little more but thought maybe somebody on this
    could give me some direction.

    I guess I should simplify the question. How do i route traffic that is
    trying to reach my website? How do I specify the correct traffic? Can I
    use a host name instead of an ip address in natd configurations?

    Sorry if this is too much, I hope I have layed out my question so that you
    can help me. Please respond to the group with any direction you could give
    me.

    Thank you,

    ASENCHI

    To Unsubscribe: send mail to majordomoFreeBSD.org
    with "unsubscribe freebsd-questions" in the body of the message

    To Unsubscribe: send mail to majordomoFreeBSD.org
    with "unsubscribe freebsd-security" in the body of the message