Shorewall users - Jun 2006 - Configure Zone-Interfaces

Hi all

I have some basic questions..
my network:
http://img226.imageshack.us/my.php?image=3faceinterface5gq.gif

as you see, I want get up shorewall with three Interfaces,
NET, DMZ & LAN
The Internet cames from the NET-Zone and I get my IP per DHCP.. 

1. Do I have to make DNAT or masquerade?
2. How can I add an IP address to the LAN & DMZ Interfaces,
wich i need for the default gateway?

thanx for help
jay





_______________________________________________________________________________
Megújult az elektronikus piactér! Mp3 lejátszótól a focimezig az [origo]-n!
http://vasarlas.origo.hu/index.vm

john doh wrote:
> Hi all
> 
> I have some basic questions..
> my network:
> http://img226.imageshack.us/my.php?image=3faceinterface5gq.gif
> 
> as you see, I want get up shorewall with three Interfaces,
> NET, DMZ & LAN
> The Internet cames from the NET-Zone and I get my IP per DHCP.. 
> 
> 1. Do I have to make DNAT or masquerade?
> 2. How can I add an IP address to the LAN & DMZ Interfaces,
> wich i need for the default gateway?
>
This is all explained at http://www.shorewall.net/three-interface.htm

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key