I currently have this network config
Internet
|
modem
|
| static IP / 29
HOMEOFC firewall/router
shorewall4
shorewall6
dns
|
ethernet switch
|
|- mail server, IP = 192.168.1.15
I've got Shorewall doing the firewalling and the NAT'ing of the static
IP to & from my mail server, and so on.
As a result of some local construction, I'm losing my current ISP and
the static IP / 29 soon, and will have to switch to a single dynamic IP.
I still need the mail server, and for the mail server I'm still gonna
need a static IP.
I've read online a bunch, and am thinking that tunneling through a VPN
to a VPS that has a static IP is the right direction.
So this is what I think the network would need to look like.
VPS firewall/router
openVPN ---------------| VPN endpoint, 10.1.1.1
shorewall4 |
shorewall6 |
| static IP "1.2.3.4" |
| |
Internet |
| |
modem |
| |
| dynamic IP |
HOMEOFC firewall/router |
openVPN ---------------| VPN endpoint, 10.1.1.2
shorewall4
shorewall6
dns
|
ethernet switch
|
|- mail server, IP = 192.168.1.15
The goal is to make all traffic to & from the mail server appear to the
'net like it's coming from and to the static IP at the VPS, '1.2.3.4'.
I suppose I could also use an IPv6 tunnel somehow, but since the mail
server needs an IPv4 address, somewhere I'd have to mv traffic between
the IPv4 & IPv6 worlds. Not sure how. socat, I think -- but I don't
think it wins me antyhing.
Anyway, that's all fine and good until I realize that I really don't
have a great handle on how to now setup both shorewalls to make it all
work. Adding the multiple networks, IPS and machines turns out to need
more shorewall expertise than I have so far.
Is there a good documentation example of this ^^ scenario that anyone
can point to?
Or maybe someone with a bit of time could kindly guide me through it
here?
Thanks.
aleph
-------------------------------------------------
ONLY AT VFEmail! - Use our Metadata Mitigator to keep your email out of the
NSA's hands!
$24.95 ONETIME Lifetime accounts with Privacy Features!
15GB disk! No bandwidth quotas!
Commercial and Bulk Mail Options!
------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
