Networking Forums

Networking Forums > Computer Networking > Linux Networking > Firewall with more than one External interface

Reply
Thread Tools Display Modes

Firewall with more than one External interface

 
 
Mauroreggio@gmail.com
Guest
Posts: n/a

 
      06-12-2008, 09:03 PM
Hi all,
i've a question about linux firewall, hope that here is a good place.
Sorry for my english.
My problema is this: i've one box with 4 NIC. Two nic are in INTERNAL
(secure) lan and the other two are in the External (insecure) lans.
The two external have connection with two different router of two
different Internet Service Provider. The two pubblic IP class
naturally are different.
The box works now with all two the providers, and i'm able to make
some NAT between one provider or the other.
The firewall is setup with FirewallBuilder.
Now happened that i MUST reconfigure all, and i start from a clean
FirewallBuilder setup.
So, only the IPTABLES configuration, from FirewallBuilder is change,
non network setup is change.
When i apply my new configuration, i'm able to make NAT only from one
of the two internet service provider (and the pubblic IP from this).
Naturally, the one that is specified like GATEWAY in /etc/sysconfig/
network file (Fedora Core 4). So, what i missed? What i forget? Where
i can specify that all two the provider can be a GATEWAY depending
from were the request arrives? ... why with the old FirewallBuilder
configuration works (naturally not maked by me) and now not works?
Thanks all.
Mauro.
 
Reply With Quote
 
 
 
 
David Schwartz
Guest
Posts: n/a

 
      06-13-2008, 05:42 AM
On Jun 12, 2:03*pm, Mauroreg...@gmail.com wrote:
> Hi all,
> i've a question about linux firewall, hope that here is a good place.
> Sorry for my english.
> My problema is this: i've one box with 4 NIC. Two nic are in INTERNAL
> (secure) lan and the other two are in the External (insecure) lans.
> The two external have connection with two different router of two
> different Internet Service Provider. The two pubblic IP class
> naturally are different.
> The box works now with all two the providers, and i'm able to make
> some NAT between one provider or the other.
> The firewall is setup with FirewallBuilder.
> Now happened that i MUST reconfigure all, and i start from a clean
> FirewallBuilder setup.
> So, only the IPTABLES configuration, from FirewallBuilder is change,
> non network setup is change.
> When i apply my new configuration, i'm able to make NAT only from one
> of the two internet service provider (and the pubblic IP from this).
> Naturally, the one that is specified like GATEWAY in /etc/sysconfig/
> network file (Fedora Core 4). So, what i missed? What i forget? Where
> i can specify that all two the provider can be a GATEWAY depending
> from were the request arrives? ... why with the old FirewallBuilder
> configuration works (naturally not maked by me) and now not works?
> Thanks all.
> Mauro.


You will need a special rule to route based on source address. There
are two places you can put this rule. One is in the firewall itself,
to make sure it forwards a packet to the correct router based on the
source address. The other is in the two routers, to have each one
bounce a packet to the other router if it receives a packet from the
LAN with a source address assigned by the other provider.

DS
 
Reply With Quote
 
pedroarthur.jedi@gmail.com
Guest
Posts: n/a

 
      06-14-2008, 01:14 PM
On Jun 12, 6:03 pm, Mauroreg...@gmail.com wrote:
> Hi all,


Hi pal,

Try to not crosspost.



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
RAS server drops external interface listinoise@yahoo.co.uk Windows Networking 0 02-07-2007 12:00 PM
Multiple External interface device >>Smith Windows Networking 10 04-17-2006 12:59 AM
help getting external interface address linux Giacomo Linux Networking 0 09-17-2005 01:08 PM
Firewall, Bridge, QoS + routing in 2 interface Dako Oten Linux Networking 0 11-11-2004 05:53 PM
Bind an external IP to an internal Interface. Me Windows Networking 2 06-03-2004 04:20 PM



1 2 3 4 5 6 7 8 9 10 11