i have added a secondary IP Adress on interface bge0 as bge0:1. bge0 is
the external interface with a netmask of /48. The secondary ip is in the
same subnet, and locally pingable.
But it is not pingable from outside. There are no filters, the /48 is
correctly routed. What have i forgotten?
Jan
Can you provide more details on how you set up the interface (I am
puzzled by your /48 netmask).
--
Stefaan A Eeckels
--
Isn't it amazing how a large number of evil morons can give the
appearance of being a single evil genius? --Mel Rimmer
> Can you provide more details on how you set up the interface (I am
> puzzled by your /48 netmask).
It´s solved another way: I thought i need an additional IP as the
sunscreen cannot handle port based dnat.
But as it can handle dnat differently based on source IP i can use the
main IP address.
But the sunscreen screws me up now....it works....sometimes. Seems to
change it´s behaviour based on moonphases or so.
Configured is dnat, open only for port 80. But sometimes all ports are
reachable. Luckily only from the one allowed address. We look now for
another Firewall.
Jan