Hi All,

OS= CentOS 5.5 64bit

Need help in setting up a Linux as a route/firewall.

My ISP has given me WAN and LAN public IPs

WAN IPs
119.226.11.246/30 (2 IPs)

LAN IPs
119.226.11.249/29 (6 IPs)

My ISP told me that 119.226.11.245 is routed to 119.226.11.246 cause this are wan IP and cannot be used directly so we have to do routing to get access to 119.226.11.245

I have no knowledge of WAN IPs
Do I need to have a WAN port on my linux firewall? Or how do I do the setup?

Because of my poor english,my answer may have some fault.

See your modem,then it may have RJ-45port,then you have no need of complex design.

ISP's comment means
"Between two connection ISP's side endpoint ip is 245 and your side is 246."

One example,below command may not exactly I'm not linux user.


Eth0 : 246/30 =>can't use any other IP
eth1 : 249/29 =>can use 249~254
eth2 : 192.168.1.1/24

route add -net 119.226.11.248 netmask 255.255.255.248 eth1
route add -net 192.168.1.0 netmask 255.255.255.0 eth2
route add default gw 119.226.11.246

You can connect two switching hubs each eth1 and eth2
interface.

There may be some other net design,but if you need to use public clients & private clients,then seperate interface using will remove much more complex.

This style design may need some considerance about BUS I/O and inturrept mechanism.

콩글리쉬로 할려니 죽겠네::

this is Korean Alphabet.English is very hard;;;

bye

Lans should use private IP addresses.

http://en.wikipedia.org/wiki/Private_network