detlev.schuemann@eurohypo.com
2003-Feb-07 00:46 UTC
[Shorewall-users] Configuration Question
I have a (maybe) simple question. My Configuration is this: ---------- | DSL | | Router | | | ---------- | | | eth0 ---------- | | | FW | | | ---------- | eth1 | | ---------- | | | Local | | Net | | | ---------- How Do I have to configure this when I want to use MASQ. Is MASQ configured only on the router, on the firewall or on both? I didn?t really understand this. Thanks in advance for your help.
I''d suggest you look at the "two interfaces" example available on the Shorewall web site - it''s your best starting point. Jon> I have a (maybe) simple question. My Configuration is this: > > > ---------- > | DSL | > | Router | > | | > ---------- > | > | > | eth0 > ---------- > | | > | FW | > | | > ---------- > | eth1 > | > | > ---------- > | | > | Local | > | Net | > | | > ---------- > > How Do I have to configure this when I want to use MASQ. Is > MASQ configured only on the router, on the firewall or on > both? I didn?t really understand this. > > Thanks in advance for your help. > > > _______________________________________________ > Shorewall-users mailing list Shorewall-users@lists.shorewall.net > http://lists.shorewall.net/mailman/listinfo/shorewall-users >
detlev.schuemann@eurohypo.com (7.2.2003 9:39):>How Do I have to configure this when I want to use MASQ. Is MASQ configured/etc/shorewall/masq eth0 eth1>only on the router, on the firewall or on both? I didn?t really understand >this.only firewall Juraj
Hi There At 09:39 07/02/03 +0100, detlev.schuemann@eurohypo.com wrote:>I have a (maybe) simple question. My Configuration is this: ><snip> >How Do I have to configure this when I want to use MASQ. Is MASQ configured >only on the router, on the firewall or on both? I didn?t really understand >this.You haven''t provided very much information but I *think* the answer to your question is that sometimes DSL routers do IP masquerading, and sometimes they don''t, and that Shorewall generally does do IP masquerading. If your problem is really "how do I get this setup working?" what you have there is a perfectly standard two interface firewall. Try working through the two-interface setup guide http://www.shorewall.net/two-interface.htm If you have any further problems, have a look at the support guide at http://www.shorewall.net/support.htm which tells you what information is needed to quickly diagnose problems. regards Julian -- jc@ljchurch.co.uk www.ljchurch.co.uk