Dear all, I got a stupid server software running on Windows 2000 server that have to use a "Public" IP instead of RFC1918 set (192.168.*.*), if I put it behind shorewall and using "Private" IP, even I am using One-to-One NAT and open all ports, their software still doesnt work. As that stupid software''s company is closed, I cannot get any modification from them. Is there anyway I can still having shorewall''s protection and getting it works like using a "Public" IP? Thanks, -- Dominie Liang http://www.hkdom.com dominie@gmail.com
>Is there anyway I can still having shorewall''s protection and getting it >works like using a "Public" IP? >Proxy-arp should fit the bill. http://www.shorewall.net/ProxyARP.htm Jerry ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
Look in the documentation for Proxy ARP. ________________________________________ Chip Burke -----Original Message----- From: shorewall-users-admin@lists.sourceforge.net [mailto:shorewall-users-admin@lists.sourceforge.net] On Behalf Of ±ác Sent: Tuesday, September 13, 2005 5:49 AM To: shorewall-users@lists.sourceforge.net Subject: [Shorewall-users] Using Real IP Dear all, I got a stupid server software running on Windows 2000 server that have to use a "Public" IP instead of RFC1918 set (192.168.*.*), if I put it behind shorewall and using "Private" IP, even I am using One-to-One NAT and open all ports, their software still doesnt work. As that stupid software''s company is closed, I cannot get any modification from them. Is there anyway I can still having shorewall''s protection and getting it works like using a "Public" IP? Thanks, -- Dominie Liang http://www.hkdom.com dominie@gmail.com
Dear all, I am using One to One NAT at the same firewall now. Can I use this too at the same time? Also, how to set the rules then? I can setup "loc:220.82.1.2<http://220.82.1.2>" something like this within? Thank you all for your help, Dom. On 9/13/05, Jerry Vonau <jvonau@shaw.ca> wrote:> > > > >Is there anyway I can still having shorewall''s protection and getting it > >works like using a "Public" IP? > > > Proxy-arp should fit the bill. > http://www.shorewall.net/ProxyARP.htm > > Jerry > > > > ------------------------------------------------------- > SF.Net email is Sponsored by the Better Software Conference & EXPO > September 19-22, 2005 * San Francisco, CA * Development Lifecycle > Practices > Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA > Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >-- Dominie Liang 梁文堅 http://www.hkdom.com dominie@gmail.com
Dom wrote on 14/09/2005 07:13:34:> Dear all, > > I am using One to One NAT at the same firewall now. Can I use this too > at the same time? > > Also, how to set the rules then? I can setup "loc:220.82.1.2" > something like this within? > > Thank you all for your help, > > Dom.Man, all your questions are answered in the proxyARP page or in the Shorewall''s FAQ. Go get some reading, please...> On 9/13/05, Jerry Vonau <jvonau@shaw.ca> wrote: > > > >Is there anyway I can still having shorewall''s protection and gettingit> >works like using a "Public" IP? > > > Proxy-arp should fit the bill. > http://www.shorewall.net/ProxyARP.htm > > Jerry