-----BEGIN PGP SIGNED MESSAGE----- Hi Jan!
I have enough public IP address - there is no problem but is there a possibility to arrange the same trafic to the second server?
Not as long as your firewall has only one public IP address. If you
have enough public IP addresses, masquerading is not necessary. You
could assign public addresses to your servers and use FW_FORWARD
instead of FW_FORWARD_MASQ. They will still be protected by the
firewall (i.e., only those ports you actually forward from the FW will
be reachable from the outside). I'm sure there are also other
possibilities (SNAT?).
Regards, Andy
- --
Andreas J. Mueller email: