In-Reply-To: <[EMAIL PROTECTED]>

>I have a firewall I have been working on. 3 NICs. I have real IP addresses
>for the outside NIC, DMZ NIC, and servers in the DMZ. I used bridging to 
>get packets from the internet to the servers in the DMZ. Here is the 
>problem.  Bridging seems to be at a lower level then packet filtering.

    Ok, your basic problem is that bridging occurs at Layer 2 using MAC 
addresses and frames (NOT PACKETS).  You either need to use a router, or a 
Layer 3 switch.  Your bridge can't even see the IP addresses of your 
packets because it operates at the wrong layer.  In case you didn't know, 
a switch is basically just a multi-port bridge (mostly).  Your question 
seems a little confused hope this was what you were looking for.



Reply via email to