Firewall

Overview

• Networks: all VLANs

The firewall is reachable at *.*.*.2 in every VLAN (e.g. 10.10.42.2 in the LAN, 10.20.42.2 in the DMZ).

In the LAN VLAN it is additionally reachable at 10.10.42.1, which is a CARP virtual IP address.

Applications

Unbound DNS Server

This DNS Server is primarily intended for the DHCP clients of the Obi LAN Kenobi network.

For DNS requests coming from the LAN VLAN (aka. Obi LAN Kenobi) it splits the traffic between internal and external:

• internal DNS queries are resolved using the bind9 DNS server running on the Infrahorst
• queries for public DNS entries (aka. "the internet") get resolved using a public DNS Server (9.9.9.9 aka. quad9).