[no subject]

> The Qube has a dedicated IP address in the same address space
> of the LAN but
> not on the same address space as the WAN.

If you are translating the addresses behind the router you could use any
addresses you want.  How many bits is your net mask?

> Cayman says that if you use NAT/Pinholing what you do to set
> it up is (if
> you have a web server on your LAN) turn on NAT and then set
> the pinhole to
> point at the IP address of the web server.

The way this works is that the DNS entry for your web server is the same as
your router.  When a request to port 80 is recieved by the router it is
internally sent to the address of the real web server.  This can be
convienient because you have the flexability to change servers and/or ip
addresses without having to change DNS info.  It also provides the same
address conservation benefits that dynamic NAT does.

>What I
> am asking is
> whether or not the Qube even supports having some other
> machine forwarding
> net traffic to it via NAT/Pinholes.  I am trying to figure out why it
> doesn't work the way Cayman says it will. At this point it's
> either the Qube
> of the Cayman. And that's one too many to deal with...

The port forwarding/static NAT/pin hole is purely a function of the router
and completely transparent to the Cube.  The translation happens at the
Cayman, all the Cube knows is that a request is recieved on port 80.  The
cube is completely oblivious to what the packet went through to get there.
Can you telnet into the Cayman.  If so, can you ping the Cube from the
Cayman by both IP and FQDN.  If you can ping the Cube via its FQDN do you
get the cube's IP address or the routers when pinhole is enabled?  Can you
ping from and to workstations?  Can you ping an outside address from the
Cayman and from internal workstations?

The firewall that I really like is the Watchguard Firebox II.  It is a
combined hardware, software and service from the manufactuer.  They really
have their stuff together, not perfect but reall very good.  I also like the
Sonicwall DMZ.  It's quite a bit less expensive however, Sonics product's
are not as complete as Watchguard's.  They are slightly simpler.  I have
used both static and dynamic NAT simultaineously on the Fireboxs without
problem.


> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Antony Chang
> Sent: Thursday, April 06, 2000 4:28 PM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: [cobalt-users] Using Qube behind Cayman Router
>
>
> Actually, I'll tell you how I have it setup.  We actually