2 DMZ zonez from one public c-class (transparent)

FlexyZ · Jan 4, 2007, 9:21 PM

Hi All,

Have not started working with pfsense yet, but I want to get startet, but have a little question (is the thread right?)

I have a public c-class : 80.80.80.0 / 255.255.255.0, can I make 2 DMZ zones (2 interfaces), and not using NAT? - with transparent IPs.

ISP -> 80.80.80.0 -> pfSense ->

dmz1 = 80.80.80.16 / 255.255.255.240
dmz2 = 80.80.80.32 / 255.255.255.240

Thanks
Felix

FlexyZ · Jan 5, 2007, 11:33 PM

I guess I need to enable bridging with the WAN interface?

Read in the original m0n0 docs, that there is a problem with traffic from the bridge to a LAN host?

"16.8. Why can't hosts on a NATed interface talk to hosts on a bridged interface?"

http://doc.m0n0.ch/handbook/faq-bridge.html

This is also an "issue" on pfsense?

Thanks

FlexyZ · Jan 10, 2007, 10:43 AM

When I use the "bridge" option, I can't subnet some of the WAN - I would like to know if I can have 2 dmz zones with a subnet of the WAN - with transparent IPs

But it don't looks possible.

Thanks

PS. (not much response to my thread)