[ previous ] [ next ] [ threads ]
 From:  Jeanne <techielists at regionalhelpwanted dot com>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] newbie DMZ question
 Date:  Tue, 8 Jun 2004 13:21:50 -0400
On Tue, 8 Jun 2004 19:09:29 +0200
Jürg Schneider <Juerg dot Schneider at fabrimex dot ch> wrote:

> > From a DMZ machine I can't reach the WAN or the ISP gateway. 
> > From the ISP Gateway I can't reach the WAN or anything on the 
> > DMZ. >What do your DMZ machines use as gateways (the WAN IP or 
> The DMZ interface of m0n0wall.

OK - but what is the actual IP that they use as a gateway if the DMZ interface is a /29?

> > how to subnet - what I don't know is how to set up monowall 
> > to move traffic through my WAN to the DMZ behind it.
> > 
> I've specified the DMZ server in 'Server NAT' and the /29 DMZ net 
> in 'Proxy Arp'. Then apropriate rules WAN -> DMZ and some for 
> DMZ -> WAN. 

What is the actual IP that you are entering in 'Server NAT' if you DMZ network is a /29?
> @Brian:
> I haven't special route for the DMZ, the routing daemon is handling
> this. The settings above should be enough. I've a special route to 
> a far LAN (behind another router), so I use 'Enable advanced outbound 
> NAT', but this shouldn't care the DMZ.
> Jürg
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch