Public IP on DMZ?



  • Hi all, I've been evaluating pfsense to replace my linux box as gateway/router.

    I got /28 public IP from my ISP (lets say it's x.x.x.[0-15]), but it's routed through a private net address (lets say it's 10.10.10.0/30; 10.10.10.1 is the ISP's gateway, and 10.10.10.2 for my IP).

    Here's my linux box's setup:

    
                         ISP
                     (10.10.10.1) 
                          |
                          |
                     (10.10.10.2)
                         eth2
          ------ eth1 - Linux Box - eth0 -------
          |   (x.x.x.14)       (192.168.0.254) |
          |                                    |
         DMZ                                  LAN
        (x.x.x.0/28)                        (192.168.0.0/24)  
    
    

    The LAN section was NATed to x.x.x.1 (in linux it's an IP alias in eth1 ).
    (Actually the LAN section is more complicated with several networks, but I figure if I can make this work, it will be easy ).

    My goal is to replace the linux box with pfsense.
    I tried pfsense (Advanced NAT, VIP, set ISP gateway as default gateway, allow all rulez) but somehow I can't even ping host that was in other networks or even any other server in internet. I can ping any IP that are located in the pfsense box.

    Now, since I have no idea where to start, can anbody give me a clue?

    (BTW, I did try a configuration using monowall, same network as above but without the LAN part (only WAN and DMZ (as LAN in monowall)), and it worked)



  • OK, so far i manage to ping from LAN to DMZ and to WAN.
    Apparently, when I assign 3 VIP to the DMZ interface, ifconfig only shows the last VIP, not 4 (it should be the original DMZ IP and 3 VIP). Reassigning DMZ IP work (but only 1 VIP)
    I still can't ping DMZ and Inet from other network connected through LAN network.


Locked