[96388] in RedHat Linux List
Re: Internet services on LAN
daemon@ATHENA.MIT.EDU (Tim Hockin)
Mon Oct 26 20:34:00 1998
From: Tim Hockin <thockin@isunix.it.ilstu.edu>
To: redhat-list@redhat.com
Date: Mon, 26 Oct 1998 19:33:37 -0600 (CST)
In-Reply-To: <00b401be0146$66d312c0$8b00a8c0@gbastian.libfin.com.au> from "gbastian@softhome.net" at Oct 27, 98 12:09:09 pm
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
> Please tell me if this isn't possible.
>
> Dial In To ISP @ aaa.bbb.ccc.ddd
> \
> /
> My PPP Internet Gateway with Real IP Address on ppp0
> with Internal Network IP on eth0
> |
> |
> Firewall Machine with Internal Net IP on Eth0 & Eth1
> |
> |
> Office LAN
at first glance, I'd say why not have the dialin-machine firewall.
> Where is the best location to run Sendmail and Squid to service our office
> so that people can still retrieve their email from elsewhere on the
> internet, and still be secure ?
do you have a valid range of IP-addresses on your "internal LAN"? Because
if you don't - no one outside your LAN will be able to find you. If you
DO, you need to have your ISP routing the traffic for that range down your
pipe. Assuming you have a valid range, and traffic is correctly routed at
you: I'd put your servers eiether between the firewall and dialin (think of
that as a router) or set up 2 NIC's in the firewall, and put those on a hub
on the second NIC with valid IP's and routes established.
> How and where do I have the company web site on an NT machine ? (Does it
> have to be outside the firewall ?)
if you want your firewall at full force, you need to set up different rules
for accessing the servers thatn the other machines.
I hope that helps. I think you might not have everything you need to
really accomplish what you need, but I hope I am wrong. I
(once-upon-a-time) learned the hardway that such a "dialin-hosted WAN
connect" didn't work all that well, if at all.
Most ISPs (working at one, I know how we do it) don't want to allocate a
static IP and IP range to a dialup site, much less route traffic down a
dialup line. Too transient and prone to failure. Also we found that the
costs of having it dialed in was more than the cost of a leased line.
Tim
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
