🚀 go-pugleaf

Hi alex,


Firing up kcalc reveals the following:

019 = 0001 0011
025 = 0001 1001
240 = 1111 0000

As Cedric says they need be on seperate subnets, however when your 
current subnet mask is bitwise AND'ed with either of the two current 
addresses you specify it can't see any difference between the subnets. 
The solution   is to reallocate either of the two IP addresses so that 
they  appear different using your existing subnet mask or to change the 
last part of your subnet mask to
248 = 1111 1000

Regards

JH



alex wrote:
> hi
> 
> it looks like - i'm to stupid and i cannot get this config working. maybee
> the reason is that my knowledge of routing is very bad. i hope you can help
> me. here is a structure picture of what i want to do... my subnetmask is
> 255.255.255.240
> 
> Internet NIC (eth0) - ip 210.2.5.18
>                        |
>                  SuseFW2---------- DMZ NIC (eth1)
>                        |                          210.2.5.19
>                        |
> NIC (eth2) - ip 210.2.5.25
> 
> 
> 1. Webserver1 (IP 210.2.5.20) and Webserver2 (IP 210.2.5.21) stand inside
> the DMZ, behind eth1
> 2. Behind eth2 stands 2 diffrent Hardwarefirewalls of different companies -
> and i want to configure a OnToOneNat, Direct Routing or whatever posible to
> the HardwareFirewalls. Maybe the IP's 210.2.5.26 and 210.2.5.27.
> 
> my loveliest dreams are 2 DMZ's but i'm not shure if this is possible... the
> real problems i have is - how to get the incoming packets from eth0 to the
> eth1 and eth2 and vice versa. the funktion IP_FORWARD isn't working - or
> bedder to say - i don't know why and how. i'm trying with the config script
> of susefirewall2 and was unsuccessful. i read 2 books about firewall and
> iptables but i cannot find any example with a dmz having official ip
> adresses... i cannot work with internal ip's and port forwarding from one
> official ip because different machines using the same ports (e.g.
> webservers). config examples are absolutly welcome! i'm a newbie on linux!
> 
> if you have bedder ideas to solve my problem - tell me! i'm open for
> "everything"...
> 
> 
> Greetings
> Alex
> 
> 
> 
> 
> 
>