[Shorewall-users] Philosophy / usage question

Jon Yeargers
Sun, 18 May 2003 20:37:27 -0000

In the example of DNS configuration in "shorewall_setup_guide#DNS" the
impetus seems to be to have static, routeable (non RFC1918) addresses for
all servers that have external visibility (DNS, WWW, mail, etc). Is this
the preferred method? (looking at the setup for the author this seems to
be used there too). At this point I have everything running through a
single IP and am using port forwarding to sort out the various bits of
incoming data to the various machines responsible for each (WWW, mail, and
soon, DNS). Granted that I only have one DNS server this way but seeing as
how I have nothing without that one connection it doesn''t make alot of
sense to me to be able to make my address information available if the
network itself is not.

Am I making a mistake by doing it this way? Or is it simply a matter of
preference?