public dmz addresses; small subnet

[Michael Perry <mperry@lnxpowered.org>]

I had some issues posting to the list earlier and ended up reading some
list archives around public Ip addresses in dmz and small subnet
routing in these exchanges

http://lists.debian.org/debian-firewall-0105/msg00055.html

I actually just got IP assignments from my ISP to bring up a webserver
because I did not want to alias port 80 traffic internally (although I
tested and could to this quite easily).  My setup could be:

external network
        |
       eth0
  ------------- |        
  198.144.206.45|eth1
                |----------------------------- -|
  192.168.0.x   |198.144.195.178-82             199.144.195.178   
 --------------- (netmask 255.255.255.248)      (webserver)
      eth2       {default route 198.144.195.177)
        |
        intl network

The existing example showed the dmz being on the same subnet as the
external address.  Mine is not that way.  I will have 4 other IP
addresses that I won't use.


-- 
Michael Perry | "Do or do not; there is no try" Master Yoda
mperry@lnxpowered.org | http://lnxpowered.org (soon to come)