i need to know if this is correct

[zeroshelluserMember]

hi all

this soft seems good, i am interested in QoS service for my lan, i will explain my network

ROUTER (192.168.0.1)
….|
….|
eth0 (192.168.0.130) (WAN)
….|
DEBIAN WITH FIRESTARTER (eth1 traffic goes throught eth0)
….|.
eth1 (10.0.0.1) (LAN)
….|
….|

---

….|…………………….|………………………|
10.0.0.10……….10.0.0.11…………..10.0.0.12
|
(lan clients)

---

|

---

|

i want to “virtualize” zeroshell in debian. i have configured the zeroshell box with ip 10.0.0.2 (ETH00 only) ETH01 don’t exist

i can shape traffic but only the outgoing, not incoming. Would be great to know how to insert zeroshell “virtualized” box in my LAN without to modify this config plz

Tnx

[ppaliasMember]

You cannot shape incoming traffic, only police.
What you can do to test your zeroshell configuration is to add another network interface on zeroshell and change the default gateway address of the lan clients to be 10.0.0.2. Then the other network interface should have IP address 192.168.0.2 and do the routing of your LAN. Then just alter the gateway address of the clients and you are ready for testing.

[zeroshelluserMember]

yeah, i undestand

i don’t want route all to 192.168.0.2 because i want all traffic pass throught 10.0.0.1, because in this nat (192.168.1.130 – 10.0.0.1) there is a firestarter firewall with some simple attack rules that i want

[ppaliasMember]

Well you just cannot do any routing or QOS with only one interface.

[Author]

Posts