EFW Support

Support => General Support => Topic started by: ozgurerdogan on Thursday 31 May 2007, 08:00:07 am



Title: Multiple ip's on red interface.
Post by: ozgurerdogan on Thursday 31 May 2007, 08:00:07 am
Hi
I want to assign mutliple public ip addresses for red interface for web server.  And want to make port forwarding depending on source ip. For example if request comes from 1.1.1.1 port 80 then should forward to internal 192.168.1.1 and if comes from 2.2.2.2 port 80 and should forward to internal 192.168.1.2.

This is neseccary for web hosting, for some specific web sites.
Is that possiple?
Thank you


Title: Re: Multiple ip's on red interface.
Post by: Buck on Monday 22 October 2007, 07:20:52 pm
Yeah I also want to known if this is possible.


Title: Re: Multiple ip's on red interface.
Post by: ozgurerdogan on Monday 22 October 2007, 07:56:51 pm
yes. Simple added the ips for red interface in aliases section. and used them on port forwarding. will you use on hosting envireoment. we can discuss on msn if you like to mine is ozgur__erdogan at hotmail com


Title: Re: Multiple ip's on red interface.
Post by: VagaStorm on Monday 22 October 2007, 10:26:11 pm
Would it be posible, ether throu the web interface or throu a shell, to add multiple interfaces to the orange sone so that I dont have to do any forwarding to get it to work? I whant servers with public ips in range .../28 and ..zzz./28 behind the router, but I dont realy know if it is doable... I dont mind adding it manualy. But it seems it is not easy to find a system that dos this and have snort ids  :-\


Title: Re: Multiple ip's on red interface.
Post by: ozgurerdogan on Monday 22 October 2007, 10:30:32 pm
What you mean multible interface on Orange? You can use a hub or route them in endian if I understood you correctly.


Title: Re: Multiple ip's on red interface.
Post by: VagaStorm on Monday 22 October 2007, 10:48:09 pm
If posible I have something that looks kind of like this:
|
|- Green \-  desktop 1
|                \- desktop 2
|
|- Orange \ -   server on range ..20.
|                  \-   server on range ..20.
|                   \
|                    \-  server on range ..10.
|                     \- server on range ..10.
|
|- Red Internett connection

This is easily configurable with things like ebox and I think m0n0wall, but then I don't get snort, or at lest no webinterface for it.


Title: Re: Multiple ip's on red interface.
Post by: ozgurerdogan on Tuesday 23 October 2007, 12:12:56 am
I think you can put a router on Orange interface and make the settings in router and make the port forwarding on endian. Why donot you have web interface?


Title: Re: Multiple ip's on red interface.
Post by: Buck on Wednesday 24 October 2007, 04:10:34 pm
Would it be posible, ether throu the web interface or throu a shell, to add multiple interfaces to the orange sone so that I dont have to do any forwarding to get it to work? I whant servers with public ips in range .../28 and ..zzz./28 behind the router, but I dont realy know if it is doable... I dont mind adding it manualy. But it seems it is not easy to find a system that dos this and have snort ids  :-\

You need to use port forwarding.
I tried several other things but it only works with port forwarding in comcination with aliases(Network -> aliases) i think.

btw thx for the replay's