Firewall with sslvpn with Internet gateway Post: 302462260

Sponsored Content

Special Forums IP Networking Firewall with sslvpn with Internet gateway Post 302462260 by itik on Thursday 14th of October 2010 12:07:28 PM

10-14-2010

Registered User

Firewall with sslvpn with Internet gateway

hi,

i have this diagram

internet
|
|
--------------
|firewall/sslvpn |
--------------
|
| 192.168.0.0/24
|
-------------------------- ---- -------------
| internet gateway win2003|----|10.1.2.0/24 |
--------------------------- ---- -------------
|
|
|
-------------
|10.1.1.0/24|
------------

internet gateway ips are 192.168.0.5(DG), 10.1.1.5 and 10.1.2.5 and it's a
windows 2003 server acting as a router.

if sslvpn client will connect with an ip of 192.168.0.x, what routing table i need to add so that client will
reach 10.1.1.0/24 and 10.1.2.0/24 subnet.

thank you for your generous help.

---------- Post updated 10-14-10 at 12:07 PM ---------- Previous update was 10-13-10 at 05:30 PM ----------

either you can put these routing table on the firewall or inject on the client, injecting on the client routing table is safer because when your firewall is hacked, hacker can know all the routing table right away.

10.1.1.0 255.255.255.0 gw 192.168.0.5
10.1.2.0 255.255.255.0 gw 192.168.0.5

Last edited by itik; 10-13-2010 at 06:43 PM..

itik

View Public Profile for itik

Find all posts by itik

6 More Discussions You Might Find Interesting

1. IP Networking

internet speed thru gateway/server

Other than security does having a separate linux box for the intranet server and a separate one for intranet gateway effect the speed of the internet connection. We have our server and gateway on 40GB HD 256 MB RAM 1.5 GHz Intel P3 Can the server/gateway be configured for better speed?...

2. Windows & DOS: Issues & Discussions

Using Windows XP as my internet gateway

I have many question regarding many things in Unix. here is another. I have a Novell 5 server Windows 2000 advanced server running active directory Windows 2000 professional server running exchange 2000 Windows XP professional providing my internet gateway through 56K dial up modem (sad I...

3. UNIX for Dummies Questions & Answers

Internet access via gateway

Internet access via gateway env: RedHat 6.1 Hi, Until now, we used PPP via an ISDN modem to connect our server to the internet. The ISDN ip-up/down scripts in /etc/ppp add ippp0 as the default route. From that point on we can for instance get mail via fetchmail. Now we have a ADSL...

4. UNIX for Advanced & Expert Users

Firewall - 2 Internet accesses - routing rules from source

Hello, I would like to modify my firewall configuration for being able to handle 2 internet connections in my Red zone. I would then like to configure some selecting routing rules depending on the internal source. Actual configuration: ===================== 1 router A (ISP)...

5. Red Hat

Set new gateway for route to internet

Hi all, i have a rhel 6.2 with a default gateway. This server is an Intranet office with no internet access. DNS are already configured and it's possible to resolve my target. My goal is to link my application (apache forward) only to http://mytarget.yyy through a new gateway (That does...

6. UNIX for Beginners Questions & Answers

Inconsistency between RedHat 6.5 global gateway and single gateway leads to loss of default gateway

Dear friends I use RedHat 6.5, which sets the gateway in the configuration file / etc / sysconfig / network as GATEWAY = 192.168.1.26, and the gateway in the configuration file / etc / sysconfig / network-scripts / ifcfg-eth11 as GATEWAY = 192.168.1.256. The two gateways are different....

LEARN ABOUT SUNOS

protocols

protocols(4)							   File Formats 						      protocols(4)

NAME

       protocols - protocol name database

SYNOPSIS

       /etc/inet/protocols

       /etc/protocols

DESCRIPTION

       The  protocols  file   is a local source of information regarding the known protocols used in the DARPA Internet. The protocols file can be
       used in conjunction with or instead of other protocols sources, including the NIS maps ``protcols.byname'' and "protocols.bynumber" and the
       NIS+ table ``protocols''. Programs use the getprotobyname(3SOCKET) routine to access this information.

       The protocols file has one line for each protocol. The line has the following format:

       official-protocol-name protocol-number aliases

       Items  are  separated by any number of blanks and/or <TAB> characters. A `#' indicates the beginning of a comment; characters up to the end
       of the line are not interpreted by routines which search the file. Protocol names may contain any printable character other  than  a  field
       delimiter, <NEWLINE>, or comment character.

EXAMPLES

       Example 1: A Sample Database

       The following is a sample database:

       #
       # Internet (IP) protocols
       #
       ip	   0   IP	   # internet protocol, pseudo protocol number
       icmp	   1   ICMP	   # internet control message protocol
       ggp	   3   GGP	   # gateway-gateway protocol
       tcp	   6   TCP	   # transmission control protocol
       egp	   8   EGP	   # exterior gateway protocol
       pup	   12  PUP	   # PARC universal packet protocol
       udp	   17  UDP	   # user datagram protocol

       #
       # Internet (IPv6) extension headers
       #
       hopopt	   0   HOPOPT	   # Hop-by-hop options for IPv6
       ipv6	   41  IPv6	   # IPv6 in IP encapsulation
       ipv6-route  43  IPv6-Route  # Routing header for IPv6
       ipv6-frag   44  IPv6-Frag   # Fragment header for IPv6
       esp	   50  ESP	   # Encap Security Payload for IPv6
       ah	   51  AH	   # Authentication Header for IPv6
       ipv6-icmp   58  IPv6-ICMP   # IPv6 internet control message protocol
       ipv6-nonxt  59  IPv6-NoNxt  # No next header extension header for IPv6
       ipv6-opts   60  IPv6-Opts   # Destination Options for IPv6

FILES

       /etc/nsswitch.conf      configuration file for name-service switch

SEE ALSO

       getprotobyname(3SOCKET), nsswitch.conf(4)

NOTES

       /etc/inet/protocols is the official SVR4 name of the protocols file.  The symbolic link /etc/protocols exists for BSD compatibility.

SunOS 5.10							    13 Jun 2002 						      protocols(4)