<![CDATA[DMZ and firewalling]]>Big picture is setting up a LAN on one NIC.
Then a DMZ NIC with multiple DMZ's that can't communicate with eachother or the LAN, but will have outbound and some inbound internet traffic.
I can't seem to figure this out. Anyone have a good how to? I seem to either block their traffic or i'm able to go sideways from DMZ to DMZ or DMZ to LAN.

]]>https://forum.netgate.com/topic/6698/dmz-and-firewallingRSS for NodeWed, 10 Jun 2026 22:26:12 GMTTue, 11 Dec 2007 18:22:13 GMT60<![CDATA[Reply to DMZ and firewalling on Wed, 12 Dec 2007 20:16:06 GMT]]>@newfirewallman:

currently i am using virtual IP and setting the subnets on servers and using the virtual ip on the dmz nic for their gateway. Using VLAN's would create many more rules and management would it not?

Most likely not if you use aliases.

]]>https://forum.netgate.com/post/163216https://forum.netgate.com/post/163216Wed, 12 Dec 2007 20:16:06 GMT<![CDATA[Reply to DMZ and firewalling on Wed, 12 Dec 2007 19:42:21 GMT]]>currently i am using virtual IP and setting the subnets on servers and using the virtual ip on the dmz nic for their gateway. Using VLAN's would create many more rules and management would it not?

]]>https://forum.netgate.com/post/163215https://forum.netgate.com/post/163215Wed, 12 Dec 2007 19:42:21 GMT<![CDATA[Reply to DMZ and firewalling on Wed, 12 Dec 2007 18:41:28 GMT]]>I would get a vlan switch and look into virtual ip

]]>https://forum.netgate.com/post/163214https://forum.netgate.com/post/163214Wed, 12 Dec 2007 18:41:28 GMT<![CDATA[Reply to DMZ and firewalling on Wed, 12 Dec 2007 18:28:51 GMT]]>That is great. Next step is how would i have mulitple DMZ's say 10-12 that are secure and can't go sideways?

]]>https://forum.netgate.com/post/163212https://forum.netgate.com/post/163212Wed, 12 Dec 2007 18:28:51 GMT<![CDATA[Reply to DMZ and firewalling on Tue, 11 Dec 2007 22:00:57 GMT]]>Remember to search first…..

http://doc.m0n0.ch/handbook/examples.html

]]>https://forum.netgate.com/post/163172https://forum.netgate.com/post/163172Tue, 11 Dec 2007 22:00:57 GMT