In article <[EMAIL PROTECTED]> 
[EMAIL PROTECTED] writes:
>IFIRC proxy_arp was/is replaced by dnat.  What you need is an IP in the
>same subnet as your external IP that you then use on your internel
>network.  When you turn on proxy_arp on your external interface it will
>pass all external arp requests onto your internal network and proxy any
>replys.  This allows for a "transparent router" aka a bridge.

DNAT and proxy-arp are differnt things sometimes used for similar
purpouses.  I use both on the same firewall.  A bridge is something
else again, that routes based on ethernet rather than ip headers and
does not add an ip hop to the traffic.
-- 
Blars Blarson                   [EMAIL PROTECTED]
                                http://www.blars.org/blars.html
With Microsoft, failure is not an option.  It is a standard feature.


Reply via email to