I am trying to setup a firewall between two hubs and this is what I have setup so far

One hub has only two connection to the 2 routers that supply our connectivivty.
The other hub hold our servers which are assigned public IPs

I am cabled to each of these hubs

I am trying to confugure the networking on the Redhat 7.2 Linux box in between these two hub. I have two nics configured.. both with public Ips
ETH0 216.X.X.90 and ETH1 216.X.X.91
The ETH0 card is the wan card and i can connect to the internet and I can connect from the internet to the ETH0 card
What I want to know is this
Is routing required in this situation and what do I need to make it work
How should my nics be configured since all machine on the lan are assigned public IPs
What other things need to be configured to allow me to use my linux box between these two hubs that are configured as described above.

Ive been banging my head on this and am trying to prove to people that Linux can be a viable solution as a firewall

Please help.. I think If I can provide this for my company I can make an argument for other linux implementation

Thanks in adavance for all your help

Jeff

All your servers using public IP is not a good idea but it is your call. Since both eth0 and eth1 are set in same subnet, you don't have to do that much but set up a firewall rules.

>>Is routing required in this situation and what do I need to make it work. -- Yes, if you use Eth1 as a gateway for your lan PCs. -- No, if you don't use Eth1 as a gateway for your lan.

>>How should my nics be configured since all machine on the lan are assigned public IPs -- Again, it depends on how your lan PCs setup.

I guess you should determine that you are going to use Eth1 as your lan PCs gateway or not?

Regards,
Lintadsl

OK.. thanks for responding... and for the advice. can you tell me how ip forward needs to be setup and what I should look for as far as other networking facilities to make this box work
I have both cards are pingable from the lan but I cannot get any traffic to get pastthe eth1 card (216.x.x.91) to the main router. (216.x.x.1 )
Netstat -rn shows that the default gateway is set > do i need anything on the router to point to the the linux box?
In short Im still stuck and need some help if anyone is willing??
Jeff

please use USEFUL thread titles in future. the fact that you need need is pretty obvious, and utterly useless.

I guess your ip forward is not enable.
On your firewall box, try this.
more /proc/sys/net/ip4v/ip_forward
If you get 0, then do
echo 1 > /proc/sys/net/ip4v/ip_forward
Then do ping to 216.x.x.1

Regards,
Lintadsl