Hi, so okay it it possible that anyone could implement this in ipfilter, I assume it's done with MAC's/arp adress, or is it already avaliable and possible with ipf/FreeBSD?
if so, HOW? thanks /D >Hey David, >I share(d) your frustration, >I ended up installing openbsd (sparc64). >with openBSD you can configure bridges (invisible -- no ipaddr) and run >pf >(openBSD's ipf clone). >Thats the only way i know of... >Ian > >----- Original Message ----- >From: <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Friday, February 07, 2003 1:44 AM >Subject: both nat and public ip behind firewall possible? > > >> >> >> Hi, >> we have a NAT box (ipfilter) with keep-state and some filtering rules >that >> acts like sort of a primitive firewall to protect the computers on >the >> inside, >> >> now however we need to have a machine that has a public ipnumber and >if >> possible I'd like to have that also behind the firewall box, >> >> the question is if this is possible at all with ipfilter, >> I tried everything I could think of yesterday, fastroute, rdr, bimap, >> locked arps, and multiple bound ip's on the inside nic, >> >> to clarify: the machine on the inside *really* needs to have the public >ip, >> I'm aware of the security dont's with this setup, but it's needed >(irc dcc >> send proxying not there until 4.0, and some filesharing apps need >a public >> ip etc so ) >> >> so is it possible at all? >> >> Thanks >> >> /David >> >> [4.7-STABLE] >> >>
