Re: Three way bridge?

#1 (**permalink**) 02-16-2008, 04:19 AM

"Peter Bako" <peter.bako@comcast.net> wrote in message
news:0_DPa.35032$wk6.8323@rwcrnsc52.ops.asp.att.ne t...
> Is it possible to use a single OpenBSD system with three interfaces where
> the WAN interface does not have an IP address, the DMZ has a /28 range and
> the LAN side is on a NAT?
>
> Our ISP gave us a /28 range of IP addresses directly out of our router.
> They cannot provide a single IP outside of this range that I would use as
> the WAN address of a traditional firewall so I installed a bride. I did
not
> bind an IP address to the WAN side, but rather assigned the .1 address to
> the LAN side. This way the systems behind the bridge can use the IP range
> and still have protection.
>
> The problem is that we need more IP addresses. The ISP cannot (or will
not)
> provide more for us and frankly I don't really need them to. For my
> internal users I'd rather use an invalid range via NAT and keep the actual
> IP addresses for my public servers on the DMZ. But without one more IP
for
> the WAN range I cannot make this work and I don't know if its possible for
a
> three way bridge.
>
> Any suggestions?

Why not redirect those extra addresses to your DMZ (Bidirectional NAT-ing)?

Another Peter

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode