Re: Transparent Internet Bandwidth / Usage monitoring

On Sun, 27 Apr 2008 14:07:52 -0700, Sam wrote:

How would routing work?

Unless building a bridge or running on the firewall itself: Not very easy
to implement and will normally require NAT.

Could computers with dedicated external IPs still use those IPs inside
of the iptables box?

Yes, if you build a bridge (and possibly manipulate MAC addresses on the
bridge). That would be my preferred solution, if I had to stay away from
modifying the chains on the firewall.

Sorry to say; Your questions suggest a necessity for some heavy duty
networking, firewall and bridge building reading...

This is a good start:
http://tldp.org/HOWTO/HOWTO-INDEX/networking.html#NETBRIDGE

BTW: Recent distributions does NOT require patching nor compiling for
bridging to work. Just search your package repository for bridge or
bridge-utils and install what you need.

--
Regards/mvh Joachim Mæland

If everything seems under control, you're just not going fast enough.
-Mario Andretti
.

Relevant Pages

  • Re: Emails using Gateway IP in header instead of router IP number
    ... that shouldn't matter whether the cable modem is bridged or routed. ... Once the SMTP traffic leaves exchange, I could route it through a packet-inspecting firewall, a NAT device, another firewall, through a linux box, through a spam filter appliance, then through an untangle setup, untill it eventually reaches my network edge and onto Comcast's network. ... header sent from server is using the gateway IP number instead of my ... They should instruct or help Sam in setting up the cable modem in Bridge mode so all outbound traffic appears be coming from the internal router. ...
    (microsoft.public.windows.server.sbs)
  • Re: IP access restriction
    ... > Would a 'firewall' like machine with IPTABLES be able to accomplish this, ... Then create a bridge ... then you add ethernet cards to the bridge (you can have multiple cards in ... acknowledges that a bridging firewall is a possibility is fwbuilder, ...
    (Fedora)
  • Re: Wkgrp Network of 3 XP and 1 2K ... CDiag logs - 1 files [1/2] - 1 files [1/2]
    ... >> Fix the Bridge on Gatewayp4, ... >> additional problems will be firewall - see the Error 6118 reference. ... Network Neighborhood while the primary master browser is offline. ...
    (microsoft.public.windowsxp.network_web)
  • PF bridged firewall?
    ... sides of the firewall, with the internal range more often than not a NAT'd ... I usually end up putting a bridge in with and IP address one ... past the point of not having enough IP's for the number of clients, ... I could drop a second firewall in, this one acting as a NAT'd range to the ...
    (comp.unix.bsd.openbsd.misc)
  • Re: Dlink 302g with Linux IPCop firewall
    ... >> to work as a bridge in conjunction with an IPCop firewall? ... It's currently letting the modem negotiate the PPP connection ... > MTU of the PPP interface is at most 1492 bytes. ...
    (comp.os.linux.security)