Sorry the first subnet is 

x.x.57.53/29

I believe the ISP is routing both assigned subnets to x.x.57.7.

Is it best to just alias the dmz interface and route?
eg   eth2 x.x.57.54 and eth2:0 x.x.114.114?

By reading the setup guide proxy arp looked like it may be easier.  It looks 
like I could just assign and unused local subnet to eth2 and put all my dmz 
hosts for both assigned subnets on it.

On 2011-05-16, at 5:02 PM, Tom Eastep wrote:

> On 05/16/2011 01:55 PM, Douglas Hammond wrote:
>> Here are my interfaces.  Note how the ISP sends all traffic to the one 
>> interface on a different subnet then the subnet(s) they have given us
>> 
>> # from isp
>> address x.x.57.7
>> netmask 255.255.255.254
>> gateway x.x.57.6
>> 
>> # assigned subnet 1
>> x.x.114.53/29
>> 
>> # assigned subnet 2
>> x.x.114.113/29
>> 
>> Can I setup proxy arp the same way as in the setup guide and put both the 
>> assigned subnets on the same dmz interface or will I have issues because the 
>> gateway is not on either subnet?  Looks almost like a static ptp to me.
> 
> 
> This should work without proxy ARP. Presumably, the ISP is routing
> subnet 2 via the x.x.114.53 address.
> 
> -Tom
> -- 
> Tom Eastep        \ When I die, I want to go like my Grandfather who
> Shoreline,         \ died peacefully in his sleep. Not screaming like
> Washington, USA     \ all of the passengers in his car
> http://shorewall.net \________________________________________________
> 
> ------------------------------------------------------------------------------
> Achieve unprecedented app performance and reliability
> What every C/C++ and Fortran developer should know.
> Learn how Intel has extended the reach of its next-generation tools
> to help boost performance applications - inlcuding clusters.
> http://p.sf.net/sfu/intel-dev2devmay_______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users


------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to