I've run into a problem setting up a ipf firewall for a friend. He's got a
block of addresses assigned to him. And I've just noticed, while setting
it up, the addresses he picked for the firewall. Both are on the
same subnet. The internal net will also be on the same subnet as the
outside interface.

Now is it me, or can I not set up the firewall this way? It does not seem
correct logically. And if I do seperate the nics onto seperate nics, I
will lose 2 needed addresses, unless I'm mistaken.

Any and all advice appreciated.

Ken