Re: [Shorewall-users] Multiple IPs

[Wratmoko H. H. <wr...@bd...>]

> Hi there,
> 
>  
> 
> I really need to know how to do this, let's say I'm in a desperate
> situation now coz I might lose my job if I didn't come up with the
> requirements.
> 
>  
> 
> I have 5 public IPs and assign them to local pcs with private IPs :
> 
>  
> 
> 224.104.97.1 = 192.168.0.1 - Firewall
> 224.104.97.2 = 192.168.0.2 - mail  - Reversed DNS
> 224.104.97.3 = 192.168.0.3 - vpn
> 224.104.97.4 = 192.168.0.4 - web server
> 224.104.97.5 = 192.168.0.5 - ftp server
> 

use static nat for do this 
also rules port permission into specific private ip's 

may you can see three interfaces configuration Sample.
> 
> Plus, I want to restrict some ports like Yahoo Messenger only for
> specific private IPs...
> 

do this with policy from local to net as deny for default.
then open permit access from lan into net with specific port
please see macro. 

> Please Sir, hope you don't mind, I really need help for this...
> 
>  
> 
> thank you in advance...
> 






------------------------------------------------------
Wratmoko Hadi HSW
GSM : +62.8157115488 
CDMA : +62.22.91175530 
E-Mail : wr...@bd...
System & Network Dev 
Pacific Telematika Indonesia 
Phone : +62.22.7308600 
Fax : +62.22.7308601 
Bandung - Indonesia 
http://www.bdg.pacific.net.id 
------------------------------------------------------
Fri Feb 23 10:14:36 WIT 2007 
Linux 2.6.17-1.2142_FC4 GNU/Linux 
Linux Counter #361972 
KPLI #022-200011-495