[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Bridge + IPFilter - IP Address and remote connections
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: Bridge + IPFilter - IP Address and remote connections
- From: Michael Dunne <mickydee_(_at_)_cairns_(_dot_)_net_(_dot_)_au>
- Date: Sat, 21 Jul 2001 14:58:22 +1000
I have spend the last few days searching the mailing lists for a scenario
like this one, however I was unable to find anything.
I have a configuration as follows:
Access Router <-- bridged connection --> Pairgain HDSL Router <--de0
OpenBSD IPF+Bridge de1 --> Home Lan (Hub)
I am not running NAT or anything like that, I have a bridged HDSL
connection to work, and I use real IP addresses on the home LAN machines.
I know how to make it an IPless IPF machine for firewalling, however I want
a single IP on the OpenBSD Bridge for MRTG Graphing and remote ssh from
work and home. The machine does not have a console at Home in its final
form, so I will need to remote admin the machine from both sides (the
monitor etc are used for another machine).
If I put the IP on the de0 (external nic) interface, I can connect to the
OpenBSD machine from work without a problem, but not the internal LAN
If I put the IP on the de1 (internal nic) interface, I can connect to the
OpenBSD machine from the internal LAN, but not from work.
Assigning a second IP to the other interface is not an option because IP's
are getting scarce.
I have tried a combination of turning on and off IP Forwarding etc, but
nothing seems to give an acceptable result. Ideally an IP on the bridge
itself would solve my problems, however reading the brconfig MAN pages etc
have not given me any insight on how to achieve this.
Is there something completely obvious that I have overlooked, or is it not
possible ?
Any suggestions would be greatly appreciated.
Thanks - Michael Dunne
Visit your host, monkey.org