To help you further, you can use gShield in customizing your LinuxFirewall.
Here's my take on your Network in ASCII:
Internet
|
|
|-----
(WAN side: Public IP)
Modem
(LAN side: Static Private IP 10.10.10.1)
|-----
|
|
|-----
eth0 (LAN side: Static Private IP 10.10.10.2)
Linux Firewall <--- here you can configure gShield to customize your rules
eth1 (DMZ side: Static Private IP 10.10.11.1)
|-----
|
|
|-----
eth0 (Static Private IP 10.10.11.2)
DMZ Host
|-----
From the above, you have two private networks: 10.10.10.0/24 and 10.10.11.0/24.
LinuxFirewall gateway = 10.10.10.1 <modem lan side>
DMZ gateway = 10.10.11.1
In gShield, packets for the DMZ will be forwarded accordingly (including ICMPs).
_________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph
