We have a scenerio where we need to assign sevreal servers with a public ip.
However, we still want to protect those servers with port filtering. We can not use NAT.
So can we have one interface on the astaro with a public ip and default gateway. Configure a second interface with another public ip (same subnet as first) but connect it to a switch and place our servers on it? Can we then filter as traffic goes between the two astaro interfaces? Servers would send traffic to the second interface which astaro send out the first interface and we filter between the two interfaces.
Essentailly we need a DMZ but requirements state we can't use a nat.
I know with some routers, the same subnet on two interfaces can not be routed...as well...its not really routing.
This thread was automatically locked due to age.
