Hi i have been looking over the internet for a way to build an internet router/firewall so my internet static ips are transparent so i can filter out
dhcp requests and internal ip addresses (ex. 192.168.1.x) from my provier's network.



Internet
|
Fiber/Bridge
| <no dhcp>
[Router/Firewall]
| <dhcp>
+---------------Machine1 [20.10.5.1]
+---------------Machine2 [20.10.5.2]
+---------------Machine3 [20.10.5.3]
+---------------Machinex [20.10.5.x]

let me get this straight ...
you want your PC's to have routable addresses behind your router to block your ISP's non-routable addresses.


that doesnt make sense.


if you want your addresses transparent you take one of your static IPs and use NAT to route it to internal IPs (192.168.x.x)

that will block any external requests and any DHCP requests will be caught by the router.

in other words any $29 router will do what you want(should want) or you can use a standard router/firewall linux setup with NAT

the only way to use all your statics would be basically have each on its own router interface and translating each individually


let me know if im just confused on what you want to do

edit: you could just use a firewall to block certain requests, but the IP's still would not be transparent



soule

Ok so i would have to have 1 nic for every ip address and i would have to nat internet addresses?
Could I put more than 1 ip address on a nic ?

The easiest way would be (other than buy a router ) ...


setup a box with two nics

one nic(a) will be hooked to your WAN connection.

it will have one of your static IPS

the other nic(b) will have a local IP (192.168.x.x)

setup NAT

hook a switch/hub to that interface(b)

and then set ip addresses on the PC' s in the same subnet as the NIC(b) (or setup DHCP)

the system will then translate traffic from IP addy (a) to internal addresses (b)

then you can setup firewall as needed with any rules needed.

soule