yes, the suggested network  sounds good. 

It is always impressive to show people what has been blocked from the
outside - the red crosses on the Firewall log page is easy
understandable by everyone. If you get something on the *nix host that
generates traffic then you can show that m0n0 has blocked it.

On 6/3/05, Nicolas Moffa <nicolas dot moffa at free dot fr> wrote:
> It is a web proxy but the part of network where is the proxy is not 
> allowed for me, a simple computing student. I am just allowed to try set 
> up m0n0wall for a part of my exams like a simple user.
> 
> But Bachman Kharazmi (a m0n0wall mailing list user) suggest to me this :
> 
> (*nix host running dhcpd, run apache too if you want something to show)
> |
> crossed cable
> |
> [WAN]
> M0n0
> [LAN +dhcpd]
> |
> crossed cable
> |
> (demostration host)
> 
> And I think it is a good idea for a m0n0wall demostration and more 
> particulary for captive portal.
> 
> 
> Nicolas
> 
> 
> sai a écrit :
> > What is the proxy between the WAN and the m0n0? If it is web proxy (ie
> > squid) then it should be in the LAN network.
> > 
> > sai
> > 
> > On 6/1/05, Nicolas Moffa <nicolas dot moffa at free dot fr> wrote:
> > 
> >>Hello everybody,
> >>
> >>I would like set up m0n0wall (and particulary his captive portal) for my 
> >>exams on a LAN test network just for demonstration. But, I have none 
> >>rights on the high school network.
> >>How I can set up m0n0wall ?? If it is possible !!
> >>
> >>WAN
> >>  |
> >>  |
> >>Proxy
> >>  |
> >>  |
> >>(172.16.1.x ==> DHCP)
> >>m0n0
> >>(192.168.10.1)(mono DHCP server)
> >>  |
> >>  |
> >>test LAN (192.168.10.0/24)
> >>
> >>
> >> From a client of test LAN :
> >>ping 192.168.10.1 OK
> >>ping 172.16.1.x   KO
> >>WebGUI access     OK
> >>
> >>
> >>Thanks all.
> 
>