On Sat, Oct 04, 2008 at 05:13:27PM -0400, Chris Buechler wrote:

> LAN was on a different subnet from what? 

LAN was a different subnet from WAN (in transparent bridge
this shouldn't matter, and it doesn't, with the exception of DNS).

Strangely enough, I now notice that both firewalls are
active, at least at times. This shouldn't be the case.

> I guess you're bridging an
> OPT interface?

Unfortunately, these mini-ITX boards only have two onboard NICs.
Otherwise I'd tried for a carp+pfsync failover. It also sucks
a bit with IPsec tunnels, since IPsec would terminate on LAN side,
and I would have to build a route or a rule to forward to WAN.

-- 
Eugen* Leitl <a href="http://leitl.org";>leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE

Reply via email to