* Howard, Neal; <nhoward@cwftx.net> on 26 Nov, 2002 wrote:

I'll try it out tomorrow, it's been a long day here in Texas too and my brain hurts right now!

I know the feeling :-)

I'm guessing I should use the external ip aliases in the first part of each stanza of FW_FORWARD_MASQ instead of putting the vendor's ip address in that place like I was doing?

Now although I said

FW_DEV_EXT="eth0 eth0:1 eth0:2"

It's better to have the aliases eth0:1 and eth0:2 in FW_DEV_DMZ and then FW_FORWARD_MASQ them for the vendor this way it should be both secure and doable (cross your fingers) -- Togan Muftuoglu