Jonas Lindskog wrote:
> We are running Open BSD 3.8 as a firewall router. The router has two
> internal networks to handle; a DMZ with "real"
> ip adresses and a NAT network to which our workstations are connected.
> The problem I have is that its not possible to
> connect to the server on the DMZ (ip, netmask
> from the outside (but from the inside).
> I guess that I somehow has to make the external interface listen to
> the same adress as the server (they are on the same net), but if I add
> an alias to the external interface it doesn't (of course) route
> packages to the DMZ. How do I make OpenBSD route packages to the
> server (and the DMZ subnet)?
> Our ISP has given us a net that has the following data:
> Net segment: /28
> net address: 
> gw address:
> firewall:    
> free ip ip:
> broadcast address:
> netmask:    
> the server has the following interfaces configured:
> ### interfaces ####
> #external interface
> inet NONE
> #internal interface
> inet NONE
> # dmz
> inet NONE

This is not an OpenBSD issue--you might want to learn about IP routing.
Either loose a bunch IPs and route the traffic properly, by putting on your external interface and on your DMZ
interface, or use NAT for everything.  There might be a better way to
route this without loosing any IPs, but, if so, I haven't thought about
it/done it before.

Reply via email to