Firewalling WAN to local where local are public IP addresses

General questions
, ,
1

We have a /29 public IP for the firewalls and have a /27 public IP space we host stuff on.

VyOS version 1.4.1

We have these set in a vlan and DHCP enabled.

What firewall rules would be needed to get to these IP/27 from the internet , my initial thought would be on forward filter as the traffic is not directly destined for the VyOS firewalls on the /29? or custom rule with a jump from forward filter when source interface is WAN ?

Won’t need to do port forwarding, again as these public IP addresses are sitting behind our firewall.

2

It sounds like like your WAN interface has the /29 and your LAN interface (or equivalent) has the /27, with vyos routing between the 2?

If so, yes it’s the forward filter.

3

Thanks for confirming :smile: brain wasn’t working properly yesterday

4

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.