[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Bridge + IPFilter - IP Address and remote connections



I have spend the last few days searching the mailing lists for a scenario like this one, however I was unable to find anything.

I have a configuration as follows:

Access Router <-- bridged connection --> Pairgain HDSL Router <--de0 OpenBSD IPF+Bridge de1 --> Home Lan (Hub)

I am not running NAT or anything like that, I have a bridged HDSL connection to work, and I use real IP addresses on the home LAN machines.

I know how to make it an IPless IPF machine for firewalling, however I want a single IP on the OpenBSD Bridge for MRTG Graphing and remote ssh from work and home. The machine does not have a console at Home in its final form, so I will need to remote admin the machine from both sides (the monitor etc are used for another machine).

If I put the IP on the de0 (external nic) interface, I can connect to the OpenBSD machine from work without a problem, but not the internal LAN
If I put the IP on the de1 (internal nic) interface, I can connect to the OpenBSD machine from the internal LAN, but not from work.


Assigning a second IP to the other interface is not an option because IP's are getting scarce.

I have tried a combination of turning on and off IP Forwarding etc, but nothing seems to give an acceptable result. Ideally an IP on the bridge itself would solve my problems, however reading the brconfig MAN pages etc have not given me any insight on how to achieve this.

Is there something completely obvious that I have overlooked, or is it not possible ?

Any suggestions would be greatly appreciated.

Thanks - Michael Dunne



Visit your host, monkey.org