Re: A query on ipchains
No, not really....
Network A (Internet)
Network B (10.10.10.1/24)
Network C (1.1.1.1/24)
Currently, the normal internal (Network B) work stations use one default gateway.
Lets say it is 10.10.10.1, and the IP Addresses of the work stations would be in
the class 10.10.10.1/24. Network C is a small group of 5 protected computers, lost
on a HUB. Their IP Addresses are 1.1.1.1/24 . My idea, was, to have Network C going
through a default gateway of 1.1.1.1 (Debian with ipchains) where the second
interface card goes to the normal network B (10.10.10.1) Therefore, Netwrok C can
see Network B, but Network B can´t access Network C. So, the ipchains box for
network C would have two ethernet cards with the following configuration :
Network B eth0 10.10.10.42 gw 10.10.10.1
Network C eth1 1.1.1.1 gw 10.10.10.42
The IP 10.10.10.1 would correspond to the ipchains box of network B. I hope this
clears something up :)
Unfortunatly I don´t have a way of words, so I kind of explain myself in a bad way?
Thanks for you time and patience....
Much Rspect !
Koala
Marco Giardini wrote:
> On Fri, Jul 07, 2000 at 12:03:16PM +0200, Mr.Koala wrote:
> > Hi List,
> >
> > I was wondering if someone could point to a vast area about ipchains. I
> > am trying to mount a debian box with ipchains and two network cards. The
> > two network cards part is going fine I think, as I am also getting help
> > to install an NE2000 as eth1. Anyway, staying on the point, the basis is
> > to connect a secure internal/internal network (Network C), to the normal
> > internal network (Network B). Network B is actually connected to the
> if you have 3 networks (DMZ, internet and a LAN) you probably need 3
> eth cards. Or have i lost something???
>
> .oesse.
> >
> > Koala
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
> --
> ------------------------------------------------------------------
> Marco Giardini
> TecnoGi spa Tel. +39 0321 885422
> Strada per Gravellona Fax +39 0321 885333
> Borgolavezzaro (NO) http://www.tecnogi.com
> Key fingerprint = B5 B4 AA 91 89 50 43 8F B1 6B C6 8C 34 79 5A 7F
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: