I�m paying for a second IP with my Comcast account. Now, from their point-of-view I should have my two Windows machines hooked up through a straight hub into the back of the cable modem. From my point of view they are out of their mind, plus I can�t set up an internal fileserver to share between my two machines� a file server I explicitly do not want to share with the world. And a test machine or two, or eight, none with �world� access.
I want my personal machine and that of my fianc� to be presented to Comcast through different interfaces. I have a physical eth2 if I find I can�t alias eth0 to be the 2nd interface as well because of MAC identity, though I plan to attempt it after I have eth2 working as I expect. Comcast will observe her traffic and mine just as they would expect through the different interfaces, so they can�t complain about me NAT�ing in violation of their AUP. Any outbound not explicitly from those two machines will be in the REJECT chain. So much for my goal� but I do not grasp how to get there. 1) What is the best way to have our XP machines identify themselves to the firewall? 2) How do I tell Shorewall to keep things straight? I plan to have the firewall cache DHCP and do Squid filtering of the web. Blacklisting should apply to both. If I had a wish, Squid would pick which outbound interface based upon which machine made the request. Same for DHCP. Alas, one can�t have everything, but insight as to how to think of an approach would be most welcome. Thank you for your assistance. --Romaq ------------------------------------ William (Andy) Smith [EMAIL PROTECTED] ------------------------------------ ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
