Shorewall users - Oct 2005 - About bridging

Hi all,

I''m a doubt about a bridging firewall with shorewall. Now I''m
running
in this situation:

I''ve got two /28 bloks of IP, suppose 192.168.1.49/28 and
192.168.1.211/28 .
Phisical situation is the following:

                                                                      
         |- SERVER2
INTERNET  <---> BRIDGE-FW <----> SWITCH <----- SERVER1
                                                                      
         |- SERVER3
                                                                      
         |- SERVER4

Servers are only with IP in first block,  gateway is default vlan
gateway assigned from my houser....  firewall has   eth0, eth1 and
br0.

It''s possibile to use shorewall in this situation? There''s a
config
sample somewhere?

The example shown on shorewall site is with 3 NICs, one for internet a
two for internal lan in bridging....

Thanks
Stefano


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl

Stefano Cislaghi wrote:
>Hi all,
>
>I''m a doubt about a bridging firewall with shorewall. Now
I''m running
>in this situation:
>
>I''ve got two /28 bloks of IP, suppose 192.168.1.49/28 and
192.168.1.211/28 .
>Phisical situation is the following:
>
>                                                                      
>         |- SERVER2
>INTERNET  <---> BRIDGE-FW <----> SWITCH <----- SERVER1
>                                                                      
>         |- SERVER3
>                                                                      
>         |- SERVER4
>
>Servers are only with IP in first block,  gateway is default vlan
>gateway assigned from my houser....  firewall has   eth0, eth1 and
>br0.
>
>It''s possibile to use shorewall in this situation? There''s
a config
>sample somewhere?
>  
>
Yes it''s possible, you just need to tell shorewall in what sides of the
bridge are the hosts/nets.
>The example shown on shorewall site is with 3 NICs, one for internet a
>two for internal lan in bridging....
>  
>
i have a similar briding config but a little more complex, you can 
download my configs at

http://w3.interlize.com.br/downloads/shorewall.tar.bz2

there are many exemples on the shorewall site that can help you, search
for bridging.
>Thanks
>Stefano
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by:
>Power Architecture Resource Center: Free content, downloads,
discussions,
>and more. http://solutions.newsforge.com/ibmarch.tmpl
>_______________________________________________
>Shorewall-users mailing list
>Shorewall-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/shorewall-users
>  
>
Paulo Cunha
pcunha@interlize.com.br






-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl

I''ll try...

Your config is not so simple. I''ll try. The problem is that
I''ve no
testing enviroment to check my configuration.

I''ll tell you.

Ste


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl