Hi, we have a NAT box (ipfilter) with keep-state and some filtering rules that acts like sort of a primitive firewall to protect the computers on the inside,
now however we need to have a machine that has a public ipnumber and if possible I'd like to have that also behind the firewall box, the question is if this is possible at all with ipfilter, I tried everything I could think of yesterday, fastroute, rdr, bimap, locked arps, and multiple bound ip's on the inside nic, to clarify: the machine on the inside *really* needs to have the public ip, I'm aware of the security dont's with this setup, but it's needed (irc dcc send proxying not there until 4.0, and some filesharing apps need a public ip etc so ) so is it possible at all? Thanks /David [4.7-STABLE]
