Hello again.

Suppose I have the following setup:

        |-----------|                                   |-----------|
LAN<--|---eth0 ---| <------LINUX Router-------> |---eth1
---|------>INTERNET
        |-----------|                                   |-----------|

eth0 = 192.168.0.1  (LAN)
eth1 = 194.105.23.2 (INTERNET)  

As a basic configuration my Linux box is in fact a NAT box and an
"iptables-based" firewall.
The box works excellent for protecting my LAN.

Now, I have bought a class of 8 IP's (real ones). Those IP's were routed
by my ISP to my little Linux box.
I have assigned 5 of these 8 IP's to some computers in my LAN, as they
need real IP's on them.
One of them is placed on an alias to eth0. (eth0:0 = 213.154.255.209).

The new gateway for these 5 computers is in fact 213.154.255.209
(eth0:0), and as far as my judgment goes they 
are completely exposed to attacks. 

Is there any possibility to make my Linux box work as a firewall, not
only for the NAT-ed machines, but also for 
these 5 computers that have real IP's?

Thanks in advance.
 


_______________________________________________
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Reply via email to