On 8/11/12 12:17 PM, Tom Eastep wrote: >> Get the gist? Ideas/orientations would be appreciated. This concept is >> inspired from an old Mediatrix 1102 VOIP ATA, to which their solution to >> QOS was to be the front-end device to the WAN, yet not impede on >> existing network topoogy, by passing-through the WAN public IP to the >> backend device in a very clever way. > > > 1) Configure the WAN interface as 1.1.1.1/32 > 2) Add an explicit host route out of the WAN interface to the upstream > router. > 3) Configure the DMZ interface as 1.1.1.1/24 > 4) Set the proxy_arp option in the /etc/shorewall/interfaces entry for > both the WAN and DMZ interfaces. >
One more thing -- if you don't need to firewall the WAN/DMZ traffic, you can simply bridge them and assign address 1.1.1.1/32 to the bridge. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
