[help] private_networks, all right!
Wed Mar 5 16:59:50 CET 2003
Thanks your instruction. SNAT is my friend!
All to go from int to dmz is SNATed. Also from int to ext[1,2] is SNATed.
When i to go a dmz host, i use it address (172.17.0.3). Change is only my
personal box the default route the firewall int address.
REDIRECT_ only needful from internet (vigor) to dmz. NAT on vigor and
REDIRECT_ on my firewall.
There is nothing bad with reserved_networks or private_networks.
I tidied my brain, still working.
Fiaif is admirable!!!
More information about the fiaif