|
||||||||||
It all hinges on your definition of "DMZ". This is what I would say: >> brigde with none > > right No, bridge with your WAN interface. >> and enter some ip address in the range of my m0n0wall's lan nic, >> right? > > No, [...] Since you're bridging the interface, you don't assign it an IP address. Now your DMZ can accomodate machines in public (WAN) address space so you can place your servers behind your firewall without having to reconfigure a thing on them. And, straight from the m0n0wall's DMZ config page: "Note: be sure to add firewall rules to permit traffic through the interface. Firewall rules for an interface in bridged mode have no effect on packets to hosts other than m0n0wall itself, unless "Enable filtering bridge" is checked on the Diagnostics: Advanced functions page." So you'll want to enable that! --B |