[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-developers] OS-discussion
- Subject: Re: [cobalt-developers] OS-discussion
 
- From: "E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>
 
- Date: Tue Mar 26 20:46:48 2002
 
- List-id: Discussion Forum for developers on Sun Cobalt Networks products <cobalt-developers.list.cobalt.com>
 
> Date: Tue, 26 Mar 2002 12:14:19 -0800
> From: Jeff Lasman <jblists@xxxxxxxxxxxxx>
> Do these BSD firewalls work without NATting?  NATting is NOT
No need to NAT unless you want to NAT.
> something our clients like.  It's not something we like.  So
> can we firwall, yet still maintain our public IP#s using these
> products?  If so, can you direct me towards documentation or a
> how-to?
Yes, you can.  As for a how-to, I'd STFW or check man pages.  I
just use the man pages to see what's new, and set up firewalls
from there.  I've been doing this for awhile, and don't readily
know of any references. :-)
Note that you'll be much happier if you avoid bridging.  Simply
get a /30 netblock for WAN interface, whatever you need for
internal space, and route.  It's just like routing over a serial
link.
Those of us who provide proper colo shield our customers from one
another by using VLANs terminated on such a router/firewall.
Will be bringing up another couple in the next week if certain
software packages stabilize.
Remember, too, that JunOS is based on FreeBSD.
> The Sun developers you're talking to are most likely Cobalt
> developers.  Of course they love their Linux; they were raised
I was raised on Linux.  I think it has its place, but it's not my
favorite.  There's more to life than Linux.
> on it.  As to the corporate culture?  That remains to be seen
> <smile>.
Or perhaps <frown>, as the case may be. ;-)
> You can cut and paste to get "Jörg"; that's what I do
Text console with no mouse. :-)
> <smile>.  Besides, he signs his posts "Jan" so my guess is
> that's what he likes to be called <smile, again>.
D'oh!  I should have noticed...
Eddy
Brotsman & Dreger, Inc. - EverQuick Internet Division
Phone: +1 (316) 794-8922 Wichita/(Inter)national
Phone: +1 (785) 865-5885 Lawrence
--
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.
These last few lines are a trap for address-harvesting spambots.  Do NOT
send mail to <blacklist@xxxxxxxxx>, or you are likely to be blocked.