2 Nov
2000
2 Nov
'00
09:36
hi folks,
can somebody see a (security) problem in assigning the external and the dmz interface the same IP-Address ? all the ipchains rules are using the interface switch (-i).
Why on earth would you do that? That is so f**ked up. Use an "internal" IP on the internal interface, like 10.0.0.1, as long as the machines in the dmz/etc know how to get to it (which they will) everything is fine.
the INTERNAL interface has a private ip address (192.168.x.x). i am talking about the EXTERNAL and the DMZ interface !! i want to do that, because they've got only 8 public ip-addresse (so 6 actually)
thanx,
jb
-Kurt
jb