Linux Bridge Firewall NAT

From: Steven Potter (axium_at_axiumcomputerservices.com)
Date: 07/30/03 

Date: Tue, 29 Jul 2003 22:07:42 -0500

I have the following configuration:

T1 Line with the ip addresses 123.123.123.144-159 SN 255.255.255.240

It has a router at 123.123.123.145. I have a RH 9 box with three
network cards that I would like to setup as follows

123.123.123.146 - eth0 Internet (public ip)
192.168.1.1 - eth1 NAT (private ip with NAT)
???.???.???.??? - eth2 Bridge from internet (I don't know if this card
needs an IP address or not)

eth0 will be directly connected to the router, eth1 will be connected to
switch1 and eth2 will be connected to switch2. I would like this box to
bridge between eth0 and eth2, and NAT between eth0 and eth1. I am just
a little confused about how to configure this. I would also like to
setup a firewall on this machine to protect the computers on the other
side of the bridge.

It seems that all of the websites that discuss this setup were last
updated in 1996 an use kernel versions 2.0.X with ipchains. Any help or
updated websites would be much appreciated.

Thanks

Steven Potter

Relevant Pages

  • Linux Bridge Firewall NAT
    ... It has a router at 123.123.123.145. ... switch1 and eth2 will be connected to switch2. ... setup a firewall on this machine to protect the computers on the other ... It seems that all of the websites that discuss this setup were last ...
    (alt.linux)
  • Linux Bridge Firewall NAT
    ... It has a router at 123.123.123.145. ... switch1 and eth2 will be connected to switch2. ... setup a firewall on this machine to protect the computers on the other ... It seems that all of the websites that discuss this setup were last ...
    (comp.os.linux.networking)
  • ~~~~~~~~~~~~~~ STATIC IP ~~~~~~~~~~~~~~
    ... setup rvl2 with dsl static ip ... static ip windows 23 server problems ... static network ip dynamic dhcp router ... setup linksys befvp41 static ip ...
    (sci.techniques.spectroscopy)
  • Re: Networking/Security Question...
    ... The router itself will be a Cisco 1721. ... >setup is very simple... ... XP sp2 having the firewall on by default. ... > # but deny established connections that don't have a dynamic rule. ...
    (freebsd-net)
  • Updated info
    ... We finally got the info from our DSL ISP to setup the router using the static ... Exception Details: System.UnauthorizedAccessException: Access to the path ... granting access rights to the resource to the ASP.NET request identity. ...
    (microsoft.public.windows.server.sbs)