External IPS on internal
-
For example if I have 10 external IP's and I want to pass some onto a DMZ zone to use the external IP's what would be the best way to accomplish this.
-
You could bridge DMZ to WAN, if you only intend to have the public IP systems there. Or you could use 1:1 NAT to map the public IPs to private IPs on a routed DMZ interface.
-
Hmmm thanks I didn't think about bridging the DMZ to the WAN. I presume I could switch on the firewall bridge interfaces so I can still use snort and the firewall function.
-
Nothing to switch on, bridged interfaces are still treated like separate interfaces and you can filter, do snort, etc. You just can't have a service listening on that interface since it has no IP address. Snort doesn't listen in that way, it does packet inspection, so it still works.
