[1844] in linux-net channel archive
Re: Need help to connect to ISP!
daemon@ATHENA.MIT.EDU (Todd Fries)
Mon Feb 5 02:16:25 1996
To: ecarp@netcom.com
Date: Sun, 4 Feb 1996 22:05:04 -0600 (CST)
Cc: erich@basenet.com, mikedlr@indy.unipress.waw.pl,
linux-net@vger.rutgers.edu
In-Reply-To: <199602031607.LAA17852@dal1820.computek.net> from "Ed Carp, KHIJOL SysAdmin" at Feb 3, 96 10:07:11 am
From: tfries@umr.edu (Todd Fries)
> Untrue. Static IPs are necessary under the following conditions:
Neither of which I agree with.
>1. You want to let other people use services that you offer
> on your box, such as anonymous FTP or telnet. In this
> case, using a dynamic IP is next to useless.
Really? Checkout my web page on
http://www.cs.umr.edu/~tfries/html.cgi?file=computer
(it will go away on the 15th when we do re-shuffling of computers here at
umr, but it works for now).
Except it only works from within umr, because of the firewall we have here.
However, it is a rule based firewall. So this (imho) IS a prime example of
a waste of ip addresses. We used to have unlimited dialup services, but now
we have the equivalent of masqueraded addresses.
Nevertheless, people do use my machine here at umr and they can find out
my ip by fingering me or checking my web page.
Next to useless is pretty much up for anyone's opinion. Not easy to get to,
not reliable, but hardly useless.
>2. You want to use either SOCKS or IP masquerading to let
> a bunch of hosts 'hide' behind you. This is a more
> efficient way of doing things than assigning either a
> bunch of IP addresses for dynamic IP or a block of
> class C addresses for hosts. In fact, I don't see why
> an entire organization couldn't live with just one IP
> address if all they want to do is let people do outbound
> services. In fact, that's exactly what our 5000+
> person organization does. We have a firewall that is
> advertised (with a static IP) - then everyone hides
> behind that one machine. We use SOCKS instead of IP
> masquerading, because SOCKS is far easier to install on
> a commercial box than IP masquerading is - we want to keep
> our kernels standard.
I am sorry you feel that way. Maybe we should rephrase that last bit.
SOCKS is the only thing available for any unix besides linux. Please
note that with ip_masquerading, one can run a windows, mac, dos, amiga, os/2,
linux, sun, anything w/out making any special software recompiles. This
makes socks much less desirable to anyone who doesn't have clients that
support socks.
--
Todd Fries...tfries@umr.edu
http://www.cs.umr.edu/~tfries
