Shorewall users - Aug 2002 - Proxy ARP Mask

Tom,

Trying to set up Proxy ARP at a new site. In "About My Network" you
show
your DMZ server (206.124.146.177) has a /24 mask of 255.255.255.0.
Elsewhere in the documentation, it''s clear that the server should have
the same mask as the external network (unless ARP''ing full subnet)
which
makes sense. Because your external network has 5 static IP''s, I would
assume the external network mask is /29. On the other hand, you also
show your Interfaces file specifies net broadcast is x.x.x.255, which
looks like it IS part of a true /24. Is the "About My..." in error, is
your external part of a true /24, or am I missing something else?
Thanks.

Ron

PS - Hope to get back to doc issues this weekend.

On Thu, 1 Aug 2002, Ron Shannon wrote:
> Tom,
> 
> Trying to set up Proxy ARP at a new site. In "About My Network"
you show
> your DMZ server (206.124.146.177) has a /24 mask of 255.255.255.0.
> Elsewhere in the documentation, it''s clear that the server should
have
> the same mask as the external network (unless ARP''ing full subnet)
which
> makes sense. Because your external network has 5 static IP''s, I
would
> assume the external network mask is /29. On the other hand, you also
> show your Interfaces file specifies net broadcast is x.x.x.255, which
> looks like it IS part of a true /24. Is the "About My..." in
error, is
> your external part of a true /24, or am I missing something else?
> Thanks.
My 5 IP addresses _are_ part of a /24.


You might check out the new Shorewall Setup Guide
(http://www.shorewall.net/shorewall_setup_guide) which covers this topic
reasonably well I think.

 
> PS - Hope to get back to doc issues this weekend.
Cool. I''ve been going through your issue list and trying to determine 
what''s fixed and what isn''t. It would be good to have an
independent
assessment though.

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net