Dmz Nic Ip Address, What Should It Be?



Hi, i have a pppoe dsl connection which works fine from suse linux.
however i would like to share the connection and setup a dmz for
servers.

i have 3 nics in my machine, giving me the following interfaces:

1) pppoe connection (internet)
2) DMZ
3) private lan

i am slightly as what the ip address of the DMZ adapter should be!! i
have a block of public addresses, for example 222.222.222.16 -
222.222.222.23. my pppoe interface gets assigned an address when it is
bought up, e.g. 222.222.222.22. if my servers in the dmz are on the
public internet and have the addresses 222.222.222.17 - 222.222.222.21,
what should the DMZ interface address be?

furthermore, what should the default gateway settings of the machines
in the dmz be? would it be 222.222.222.23 (the routers pppoe address),
or the address of the servers DMZ interface card? i would expect it to
be the dmz interface address and If so, would i be right in thinking i
would need to assign the DMZ interface a public address also therefore
loosing one useable ip address?

I am so confused, and after several hours of hunting for answers before
posting a little frustrated too!

If anyone can help me it would be much appreciated.

Cheers,

Chris

.



Relevant Pages

  • Re: PIX proxy-arp question
    ... > ip address dmz 194.195.196.65 255.255.255.192 ... configuration, the network configured on the dmz interface is contained ... network and use it on your dmz interface. ... Set up statics for your servers using addresses from your address range ...
    (comp.security.firewalls)
  • RE: Question about DMZ Domain Member and Virus Membership
    ... test and audit the servers regularly. ... Question about DMZ Domain Member and Virus Membership ... Tailor your education to your own professional goals with degree ... Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • RE: antivirus software for DMS computers???
    ... Say you're running an Web+FTP server in your DMZ... ... > All of my servers in the DMZ have AV protection. ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
    (Security-Basics)
  • Re: internal domain credentials to access DMZ resources
    ... Create a new forest in DMZ, and let DMZ forest trust LAN forest 1 way. ... join web, NAS, and SQL servers to DMZ forest ...
    (microsoft.public.windows.server.active_directory)
  • Re: Trihomed DMZ just doesnt work
    ... To be succsessful with tri-homed ISA configuration you should follow the ... You should assign your DMZ interface the IP address from the block of IPs ... And what we've got here with your configuration... ...
    (microsoft.public.isa)