nat vs bridge firewall ?

[hkgonra]

I am currently running a sonicwall and need untangle to be able to handle this configuration.
http://info.bluezonesoftware.com/docs/html/draw2.htm
Basicly my server has to have a public ip address in it's nic and the firewall needs to be able to handle me telling it that these ip's are in the DMZ.

[dmorris]

welcome to the forums!

I'm not sure what you mean.

Untangle installs inline (the pic makes it looks like you're looking for some out-of-line solution?)

If you are looking for an inline solution you can easily do this with a transparent bridge - just give untangle a public IP right next to your DMZ servers and it will bridge whatever is in its subnet...

[hkgonra]

I want untangle to be my firewall.
Most open source firewalls that I have used have to have private ip ranges for the dmz , does untangle have this same limitation ?

Setup would be
24.xx.xx.58 wan ip ( public ip for all traffic from lan )
24.xx.xx.59 server on the dmz

[mdh]

You can use the DMZ with public addresses if the DMZ interface is bridged to the external, or with private addresses if it will function as a second internal subnet.

[hkgonra]

thanks , looks like time for me to give it a try.