I have read the archives, and I know this has been brought up several
times before, but please hear me out. The general attitude seems to be
that you should never need to have multiple IPs assigned to your WAN
interface and that it can always be done through NAT in some way
(mentioned at http://m0n0.ch/wall/docbook/faq-ipalias.html). I don't
know if my case is special, or if I'm just not understanding something.
Our network consists of xx.xx.152.0 - xx.xx.155.255. My upstream
provider has a Cisco router at xx.xx.152.1. This will be my m0n0 box's
default gateway. The old network setup used two linux firewalls (one
for internal, one for DMZ). The upstream Cisco splits incoming traffic
between the two firewalls. It routes some traffic to xx.xx.152.2 and
some to xx.xx.152.3. If I set my m0n0 box's WAN ip to be xx.xx.152.2, I
lose all the traffic routed to xx.xx.152.3.
I need m0n0 to recognize traffic that comes in on either xx.xx.152.2 or
xx.xx.152.3 as being WAN traffic. Then, it routes it to the DMZ or to a
NATed service on the internal net or whatever.
Does this make sense? I can provide a complete diagram of the network
if it would help.
Thanks for all your assistance!