Re: NAT & MASQ

Tom Eastep
Fri, 07 May 2004 18:43:25 -0000

**Woody** Dan Lamar Woodham Jr wrote:

> I seem to be missing the big picture here.. can you shed some light?
>
> I have read all of your docs.. but the more I read the more confused I
get..
> I am sure that there are several ways to setup the firewall... can you give
> me some direction? I don''t want you to get techinical.. just a
basic
> overview of what I should do and I can take it from there.. much thanks..

The setup guide (http://shorewall.net/shorewall_setup_guide.htm) gives
my recommendation for setting up a three-interface firewall with
mutliple IP addresses.

I would just let Shorewall add the alias for the router in the
''loc''
zone (Proxy ARP doesn''t use aliases) -- see
http://shorewall.net/Shorewall_and_Aliased_Interfaces.html.

-Tom

--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net