carpenike Tux's lil' helper
Joined: 10 Feb 2005 Posts: 127
|
Posted: Sat Aug 26, 2006 4:21 am Post subject: Routing out an Interface... Proxy Arp maybe? |
|
|
Hello,
I have 5 Public IP addresses from my ISP.
I configured a router with 4 NIC cards, 2 of them are bridged (call it my DMZ), two of them are set to be NAT'd. the two that are bridged pull their IP addresses from my ISP's DHCP server. The two that are NAT'd are NAT'd to an IP address set ontop of the bridge group.
I'm using shorewall to configure everything, and as far as access goes, all works fine...
However, whenever I try to access something in my DMZ from one of my NAT'd addresses, my bridge group sends the packet up to my ISP's router, and my ISP's router sends the packet back down to the server on my DMZ.
I'd like the router to drop that hop without sticking a static route in by hand...
Whenever I type in:
# route add -host <ip address> dev br0
It drops the extra default route...
Is this called proxy arping?
If not, is there another term? |
|