hi folks,

can somebody see a (security) problem in assigning the external and the dmz interface the same IP-Address ? all the ipchains rules are using the interface switch (-i).

Why on earth would you do that? That is so f**ked up. Use an "internal" IP on the internal interface, like 10.0.0.1, as long as the machines in the dmz/etc know how to get to it (which they will) everything is fine.

thanx,

jb

-Kurt