wmoran at collaborativefusion.com
Tue Dec 12 13:45:22 PST 2006
In response to "Bret J Esquivel" <besquivel at immense.net>:
> I have a cable modem at my office with a /28 allocated. I have a FreeBSD 6.1
> firewall/router in between the cable modem and the switch to other nodes. My
> question is how could I add static routes to say my web server having an
> external IP address but still going through the firewall box? NAT is not an
> INET (18.104.22.168/28) -> [xl0] Firewall (22.214.171.124) [xl1] -> [xl0] Web
> server (126.96.36.199)
I could have swore that someone else recommended bridging, so I won't
bother to bring it up.
The other option is to set that system up as a router, and build a proper
routing table. Your ISP will need to be involved so they know to route
traffic to your subnet through your gateway system.
You need to enable forwarding in /etc/rc.conf. Then you'll need to
subnet your range properly. Something like:
188.8.131.52/29 -> external
184.108.40.206/29 -> internal
Then set your external interface on the router to 220.127.116.11 and
the internal interface to 18.104.22.168. They you can use
22.214.171.124 - 249 on the inside.
Configuring the FreeBSD machine as a bridging firewall will simplify
the process, however, and is the approach I would recommend.
Collaborative Fusion Inc.
More information about the freebsd-questions