My preference would be to use OpenBSD for this sort of functionality.  But I 
understand that you
can put Darren Reed's IPF on FreeBSD and this will do what you want.

I would get a public IP address for the server and do a static mapping to 192.168.2.0 
on the
firewall or the internet router.

You'll probably also need a split-DNS for internal and external name resolution.

Bruce

> aybe just my pain, but I am perusing everywhere
>  (http://groups.google.com), also faq's, tutorials and so on, but I am
>  not able to get a single reply (maybe I am too newbie even for the man
>  pages - I cannot apply it to my question):
>
>  I need to mount a server in a (sort of) dmz, serving http, pop3 and smtp
>  for both sides of a firewall (the public and the private), like this:
>
>  /internet/---/firewall/---> internal lan (192.168.1.0)
>                 |
>                 |--> /server(s) 192.168.2.0)
>
>  any request to the external ip for any available service must be
>  addressed to the 192.168.2.0. Also, any request from 192.168.1.0 *must*
>  be addressed to the 192.168.2.0
>
>  Anybody please can point me out to any document, tutorial, easy-hands-on
>  on the subject?? Even RTFM will help, *if* mentioning the correct
>  expression which must be searched.
>
>
> sauda��es,
>    irado furioso com tudo
>    linux user 179402
> deus � constru�do � imagem e semelhan�a do homem. Principalmente em seus defeitos.
>
>    por favor, clique aqui: http://www.thehungersite.com
>    e aqui tamb�m: http://cf6.uol.com.br/umminuto/
>
> ------------------------------------------------------------
> Nettaxi would like to ask for your help in donations to the RED CROSS today!
> http://www.nyredcross.org/donate/
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls

-*-*-*-*-*-*-*-*-*-*-*-*-*-

All opinions are my own.
All advice is worth what you pay for it.
A little experience often upsets a lot of theory.

-*-*-*-*-*-*-*-*-*-*-*-*-*-

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to