Re: Single public ip address

  Yes, this is possible.  I have done it on several sites using iptables, NAT,
& port forwarding, running on Linux.  Although, any firewall device should be
able to do this.
  Since each of the tasks you have listed below runs on a different port, you
can use port forwarding to send them to dedicated hosts on either your
internal LAN (VPN) or DMZ (web server).  By sending them to dedicated hosts,
after the firewall inspection/approval process, you reduce the load on your
firewall machine.  You are also then free to use whatever OS/application combo
suits your needs.
  Please feel free to drop me a note if you have any more questions.

Brian


---------- Original Message -----------
From: Kelvin Tarver <ktarver@fitnc.com>
To: firewalls@securityfocus.com
Sent: 17 Feb 2005 09:35:34 -0000
Subject: Single public ip address

> Is there a way to have a single ip address do the following:
>
> 1)Function as the outside interface of a firewall.
> 2)Use that same public ip address, and outside interface to function 
> as a vpn server. 3) Have the same public ip address PAT to a public 
> web Server on the dmz.
>
> The goal is to have the outside interface of a firewall, vpn server, 
> and a public webserver to share the one public ip address.
>
> Is this possible?  I'm convienced it isn't possible, but I might be 
> missing something.  Any insight on this issue would be greatly appreciated.
>
> Thanks.
------- End of Original Message -------