Article View: alt.os.linux.suse
Article #223Re: iptables/routing and DMZ's
From: alex
Date: Thu, 11 Oct 2001 20:37
Date: Thu, 11 Oct 2001 20:37
32 lines
2791 bytes
2791 bytes
> As Cedric says they need be on seperate subnets, however when your > current subnet mask is bitwise AND'ed with either of the two current > addresses you specify it can't see any difference between the subnets. > The solution is to reallocate either of the two IP addresses so that > they appear different using your existing subnet mask or to change the > last part of your subnet mask to > 248 = 1111 1000 i get from my isp 16 addresses this can only be done by a subnet 255.255.255.240 (210.2.5.16-31) - i think so!? if i am wrong - please correct me... and please tell my why (newbie :-((( ). this is the situation i'm in - and i need to workaround - how ever! can i change the subnetmask without telling this my isp? realy i haven't anytime worked with calculating ip subnets... and haven't deep tcpip knowledge :-((( one of my greatest problems... am i right and will this be working if i will change this to eth0 = 210.2.5.17 / 255.255.255.252 - (210.2.5.16-19) eth1 = 210.2.5.20 / 255.255.255.248 - (210.2.5.16-23) eth2 = 210.2.5.24 / 255.255.255.248 - (210.2.5.24-31) hm... looks wrong... eth0 and eth1 having overlapping ip's... in eth0 .19 is broadcast adress and in eth1 the .23 - this looks like only 2 hosts in dmz... shit... hm. i don't realy need to route the official ip address over eth2 - i can masquerade - if no other way is possible... but this might bei a bad workaround, on my view. Alex
Technical Details
Message-ID:
<9q4vv7$csk$00$1@news.t-online.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!supernews.com!newsfeed.direct.ca!look.ca!news.maxwell.syr.edu!grolier!newsfeed00.sul.t-online.de!newsmm00.sul.t-online.com!t-online.de!news.t-online.com!not-for-mailReferences:
<9q3qa9$tbr$06$1@news.t-online.com> <3BC5D700.8040408@ntlworld.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1041dd,b373d989fc833e9e X-Google-Attributes: gid1041dd,public X-Google-Thread: f4b73,b373d989fc833e9e X-Google-Attributes: gidf4b73,public X-Google-Thread: 10669a,b373d989fc833e9e X-Google-Attributes: gid10669a,public X-Google-ArrivalTime: 2001-10-11 13:41:09 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!supernews.com!newsfeed.direct.ca!look.ca!news.maxwell.syr.edu!grolier!newsfeed00.sul.t-online.de!newsmm00.sul.t-online.com!t-online.de!news.t-online.com!not-for-mail From: "alex" <ntnewsNOSPAM@hrz3.hrz.tu-darmstadt.de> Newsgroups: alt.os.linux.suse,ch.comp.os.linux,comp.os.linux.networking Subject: Re: iptables/routing and DMZ's Date: Thu, 11 Oct 2001 22:37:59 +0200 Organization: T-Online Lines: 35 Message-ID: <9q4vv7$csk$00$1@news.t-online.com> References: <9q3qa9$tbr$06$1@news.t-online.com> <3BC5D700.8040408@ntlworld.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: news.t-online.com 1002832679 00 13204 DgLWSUObSXA-ov 011011 20:37:59 X-Complaints-To: abuse@t-online.com X-Sender: 520078324419-0001@t-dialin.net X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000