[NCLUG] firewall nic config

Matthew Wilcox willy at debian.org
Thu Apr 25 19:54:58 MDT 2002


On Thu, Apr 25, 2002 at 07:37:44PM -0600, William Dan Terry wrote:
> On a firewall with one ethernet card for connecting to the LAN and one connecting to the Net is there a way to set the netmask or something else to split a class C so that most of the addresses are on the inside and only a small number are on the outside? If not, is there any reason I couldn't add 2 more NICs and at least set the netmasks for the 4 NICs each have a quarter of the class C and connect three to an inside hub? I've never configured a firewall (ipchains) for more than 2 interfaces. Is it doable?

Could you word-wrap please?  It makes your text easier to read.

Really, this is not a good idea, and if the hosts inside aren't reachable
from the outside at all, use the private address ranges (192.168/16,
172.16/12, 10/8).

-- 
Revolutions do not require corporate support.



More information about the NCLUG mailing list