Hi,

im currently using a fc4 box as a firewall, the ppp0 is my usb modem, and eth0 currently the rest of the network. masqurading is set up and its working fine. I have a second ethernet card in the machine, eth1, which i want to put half of the network on, basically so i can graph traffic for each side. Ones going to be for client machines, the other for other servers.

My question is, can i allow the machines on eth0 ( clients ) access the internet via ppp0, but the servers on eth1 only access the internal network ( eth0 ) and not the internet?

thanks in advance,

digi

No reason you shouldn't be able to. I'm assuming you are using netfilter/iptables to do the masquerading. If so in your firewall script you would permit only input on eth0 to masquerade as output on ppp0. As for communications between eth0 and eth1, you are effectively bridging or routing these 2 networks and would need the appropriate tools to do so, either a bridging setup or (probably the better option) a routing daemon with the firewall configured as your default gateway.

HTH,