[76648] in North American Network Operators' Group
Re: New Computer? Six Steps to Safer Surfing
daemon@ATHENA.MIT.EDU (Iljitsch van Beijnum)
Sun Dec 19 13:51:31 2004
In-Reply-To: <87k6re8ese.fsf@valhalla.seastrom.com>
Cc: nanog@merit.edu
From: Iljitsch van Beijnum <iljitsch@muada.com>
Date: Sun, 19 Dec 2004 19:50:59 +0100
To: "Robert E. Seastrom" <rs@seastrom.com>
Errors-To: owner-nanog-outgoing@merit.edu
On 19-dec-04, at 16:54, Robert E. Seastrom wrote:
>>> Some manufactures, such as Apple AirPort Extreme, also make dialup
>>> gateways with dialup modem PPP and firewall capabilities.
>> Actually the Airport Extreme doesn't do firewalling.
> It does PNAT and port forwarding to an inside IP address with
> remapping. This matches with the vernacular use of the term
> "firewall".
If you say so...
> I've not tried to get it to route a subnet; I'm not even
> sure if it's possible.
Not as far as I can tell. But being a base station, it can act as a
switch. In this mode, it's completely transparent (unless you count
rate limiting multicasts...). And even with NAT there is no way to
filter outgoing traffic.