That can be how it works if that's what you want. It's the way I'm doing it. I have my router running NAT. If I hit my external address to access web, e-mail, or whatever, it's pulling that information off of one of the internal boxes, and those boxes have only private IP's. However, it appears from the outside to be coming from one of my public IP addresses. That sounded to me like what you wanted too. Maybe I'm confusing the issue... ;) > Except that I need the traffic from the internal machines to appear to > come from the public addresses. > > On Mon, 2004-12-06 at 16:25, Garrett Krueger wrote: > >> NAT! >> >> Have your router do NAT >> >> > I'm trying to setup a DSL modem and a firewall and having some real >> > problems. >> > >> > Here's the current setup: >> > >> > DSL 155.57/28 --- 155.77/28 netscreen 5XT 192.168.10.100/24 --- >> managed >> > switch -- boxes >> > >> > I've got a block of ips in the 155.57/28 range. I want boxes that are >> > externally visible (in 155.57/28) and protected by a firewall; such >> that >> > it appears that the machines are directly on the internet. I >> currently >> > only have access to the netscreen, although I might be able to >> convince >> > the appropriate people to use a Linux/BSD machine. >> > >> > I can change the IPs on the netscreen, but don't have a second public >> > block. Is this possible? >> > >> > >> > ________________________________________________________________________ >> > Jon Schewe | http://mtu.net/~jpschewe >> > GPG signature at http://mtu.net/~jpschewe/gpg.sig.html >> > For I am convinced that neither death nor life, neither angels >> > nor demons, neither the present nor the future, nor any >> > powers, neither height nor depth, nor anything else in all >> > creation, will be able to separate us from the love of God that >> > is in Christ Jesus our Lord. - Romans 8:38-39 >> > >> > _______________________________________________ >> > TCLUG Mailing List - Minneapolis/St. Paul, Minnesota >> > Help beta test TCLUG's potential new home: http://plone.mn-linux.org >> > Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery >> > tclug-list at mn-linux.org >> > https://mailman.real-time.com/mailman/listinfo/tclug-list >> >> >> >> _______________________________________________ >> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota >> Help beta test TCLUG's potential new home: http://plone.mn-linux.org >> Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery >> tclug-list at mn-linux.org >> https://mailman.real-time.com/mailman/listinfo/tclug-list > > > ________________________________________________________________________ > Jon Schewe | http://mtu.net/~jpschewe > GPG signature at http://mtu.net/~jpschewe/gpg.sig.html > For I am convinced that neither death nor life, neither angels > nor demons, neither the present nor the future, nor any > powers, neither height nor depth, nor anything else in all > creation, will be able to separate us from the love of God that > is in Christ Jesus our Lord. - Romans 8:38-39 > > _______________________________________________ > TCLUG Mailing List - Minneapolis/St. Paul, Minnesota > Help beta test TCLUG's potential new home: http://plone.mn-linux.org > Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery > tclug-list at mn-linux.org > https://mailman.real-time.com/mailman/listinfo/tclug-list _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota Help beta test TCLUG's potential new home: http://plone.mn-linux.org Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list