LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   File sharing on an OpenBSD bridging firewall (https://www.linuxquestions.org/questions/linux-networking-3/file-sharing-on-an-openbsd-bridging-firewall-301885/)

mullog 03-15-2005 10:33 AM

File sharing on an OpenBSD bridging firewall
 
Being quite new at the concept of bridging, i've read a few papers wich explained that a bridging firewall would be something like a black box, completly invisible, transparent an therefore unreachable.
So here i'm thinking about using it on my home lan and suddenly i remember i wanted this machine(which will have OpenBSD) to act also as file/backup and database(mysql) server.

From what i read it is quite impossible to do that and turnning the computer into a bridging firewall, but i wanted to check this to people who know more about networking than me. And i would also like to know if without bridging, an OpenBSD firewall should still provide very strong protection.

Thanks.

fr_laz 03-15-2005 10:50 AM

Hi,

No, that's not impossible. You'll loose the transparence, but your firewall can act as a bridge & run some daemons.

The feature is called ebtables, I've never used it, but it exists.

mullog 03-15-2005 02:00 PM

Ok, i've checked ebtables and from what i've read the caractheristic i need is called "Brouting: decide which traffic to bridge between two interfaces and which traffic to route between the same two interfaces. The two interfaces belong to a logical bridge device but have their own IP address and can belong to a different subnet.".

Ok so far. But...Is it not possible to do it directly with PF(Openbsd)?

fr_laz 03-16-2005 10:43 AM

Re,

don't know much about freebee... I wanted to give it a try but the hard disk controller I intended to use was not recognized during installation... so I could not write anyhting to the disk.

Anyway, if you really want to set up a transparent filtering bridge, it's not a good idea to use it as a server as well : you'll completly loose the feature of a "black box".


All times are GMT -5. The time now is 04:46 AM.