routing question

From: Pascal Nobus <pascal@xxxxxxxx>
Date: Fri, 30 Jun 2006 10:49:56 GMT

This is the situation:

Internet ____ firewall A _______
123.123.1.1 \ SERVER C
\___ eth0 123.123.1.2
/ eth0:1 213.213.1.2
Internet ____ firewall B _______/
213.213.1.1

Routing table Server-C
route gateway metric
0.0.0.0 123.123.1.1 1
0.0.0.0 213.213.1.1 5

Normal traffic goes to host C (IP 123.123.1.2) through firewall A.

In case firewall A got disconnected from the internet:
- We change IP for host C tot 213.213.1.2, so all traffic should go to eth0:1 by firewall B.
But how will Server-C respond?
a) as 123.123.1.2 through firewall B?
b) or as 213.213.1.2 through firewall B?

In case of a) a http-connection will still not work (123.123.1.2 is unreachable for the internet)...

P.S.
I know you better of with BGP routing instead of 2 firewalls, but we can't get a own AS-nr...

best regards,
Pascal
.

Prev by Date: Re: Help: What's the raw packet socket?
Next by Date: Re: Bare-bones file server?
Previous by thread: Help: What's the raw packet socket?
Next by thread: Filtering DHCP Requests so that ICS DHCPD don't get them
Index(es):
- Date
- Thread

Relevant Pages

Re: ip forwarding woes
... It turns out routing table on the 10.0.0.2 host was wrong, ... I can ping the firewall at both 192.160.0.1 and 10.0.0.1. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
(Debian-User)
Re: Host Computer with ICS cannot be accessed
... I have the Main (Host) computer with XP SP1 which is the ICS computer on a ... firewall settings, not that I've found so far, but I'll keep looking. ... >>connection, I can check or uncheck the firewall setting to allow others on ... Is there a way I can tell my Host server to allow the Client ...
(microsoft.public.windowsxp.network_web)
Re: Host Computer with ICS cannot be accessed
... I have the Main (Host) computer with XP SP1 which is the ICS computer on a ... firewall settings, not that I've found so far, but I'll keep looking. ... >>connection, I can check or uncheck the firewall setting to allow others on ... Is there a way I can tell my Host server to allow the Client ...
(microsoft.public.windowsxp.network_web)
Re: One computer cant see the other.
... I'm not sure I'm doing this right Steve, but on the command prompt at my host ... command prompt on my host machine and my client machine when I ping the host. ... network of two computers. ... The most likely problem is that a firewall (Norton, McAfee, ZoneAlarm, ...
(microsoft.public.windowsxp.network_web)
RE: [fw-wiz] Vulnerability Response
... >> management effort scales with the number of hosts. ... It scales non-linearly if the problem area is well-defined. ... Now - if you're gonna make a firewall policy for 10,000 desktops ... When someone talks about doing mitigation at the host level, ...
(Firewall-Wizards)