RE: DNS ..where to put..DMZ or ...

1999-08-25 Thread Myllymäki Sakari
-Original Message- From: Tally [SMTP:[EMAIL PROTECTED]] Sent: Tuesday, August 24, 1999 2:52 AM To: [EMAIL PROTECTED] Subject: DNS ..where to put..DMZ or ... This question has been asked n number of times on this list. but after searching through the archives it has

Re: quad cards on firewalls

1999-08-25 Thread Art Coble
At 06:59 PM 8/24/99 +0200, Chris Osicki wrote: Why would you want connect all four to the same switch? The switches are nowdays not that expensive ;-) Am I missing something here? Different VLANS on the same switch. There have been reports that Catalyst cam tables can get messed up. I

Re: quad cards on firewalls

1999-08-25 Thread reynhout
From: "peter pajak" [EMAIL PROTECTED] Subject: Re: quad cards on firewalls not exactly, since all NICs on sun boxes always have the same mac address (burnt into the motherboard) all switches are designed to handle that all right. besides, all comunications start with the ip address being

Re: FW: DNS ..where to put..DMZ or ...

1999-08-25 Thread W Joel Gridley
What RFC covers this 90.0.0.0 network? According to IANA-ARIN, this is a reserved netblock (64.0.0.0 - 95.255.255.255). Which RFC talks about it? I have no idea what they're reserved for, and doing a search on the range itself gets me nothing but a blank screen. Any ideas? Only thing I know is

Re: quad cards on firewalls

1999-08-25 Thread Woody Weaver
At 05:55 AM 8/24/99 -0700, peter pajak wrote: not exactly, since all NICs on sun boxes always have the same mac address ^^ Not always! There is an eeprom setting to adjust this behavior. (burnt into the motherboard) all switches are designed to

Re: quad cards on firewalls

1999-08-25 Thread Doug Hughes
http://www.securityfocus.com/templates/forum_message.html?forum=2head=32id=32 forum - Guest Feature: The Internet Auditing Project (p1 of 7) Thu Aug 19 1999 Cautionary Tales: Stealth Coordinated Attack HOWTO It's buried kinda deep in the article, under; E) Embedding, and

Re: quad cards on firewalls

1999-08-25 Thread czarcone
Why would you want connect all four to the same switch? The switches are nowdays not that expensive ;-) Am I missing something here? Primarily for reasons of bandwidth. Fast EtherChannel, for example, lets you aggregate multiple Fast Ethernet links into "virtual" pipes. So to use Sun's Quad

Re: quad cards on firewalls

1999-08-25 Thread Doug Hughes
Why would you want connect all four to the same switch? The switches are nowdays not that expensive ;-) Am I missing something here? Well, for one thing, you could run sun-trunking-1.0 which is compatible with about 10 different switch vendors and get aggregate 400MB full duplex throughput.

RE: [Disaster] Recovery of Internet Connection

1999-08-25 Thread Bill Stackpole
Actually this is pretty easy to do if you are not the primary domain controller for your address space. Your primary domain controller (usually for ISP) can redirect your inbound traffic to another location by simply changing your addresses in their DNS. It does however, take some time for all

Cable Internet Setup...what is the best way?

1999-08-25 Thread Daren John
If anyone can help: I have internet access via the local cable operator. I have an NT server, and 3 clients (two desktops and a laptop) What have you found to be the best set up for this type of environment? Regards, DJM ___ Get

Re: VPN Best low cost solution?

1999-08-25 Thread Jen
I assume you're talking about remote access solutions as opposed to network to network ... You should also factor in the cost of managing the solution you pick, and also the security of the solution. We ended up choosing Nortel's Contivity box for this reason. The users find it really easy to

Cable UTP

1999-08-25 Thread Fiorenzano Luis Alejandro
I'm a machine Silicon Graphics with interface ec0 and ec1. I'm Gauntlet 3.1.1 for IRIX 6.2. The interface ec0 is trusted and is conecting to switch in the LAN. How I can conecting the interface ec1 with cable UTP direct to port ethernet in a router 3COM Netbuilder II?. Thank. - [To unsubscribe,

RE: quad cards on firewalls

1999-08-25 Thread Gerrish, Robert
What I had been told by Sun support several years ago (and appears to be true AFAIK) is that the interfaces actually have separate MAC addresses burned into them, but Sun (4.x Solaris) only reports the first MAC address. I can't remember how at this point, but I was shown how to find the MAC

Re: Port 8080 Scans - Democracy ?

1999-08-25 Thread Joe Matusiewicz
At 07:40 PM 8/23/99 -0400, spiff wrote: On Mon, 23 Aug 1999, Joshua Chamas wrote: Many of the scans that hit my network, especially on the weekends, are of the port 8080 variety, sometimes including port 3128, which seem to be looking for HTTP Proxy services. Yes I agree, there is

Re: Network browsing through a VPN

1999-08-25 Thread Jen
Browsing doesn't really work that great with Microsoft Networking, especially if Win 95 boxes are involved. I do not know what causes this problem to begin with, but I know that we experienced this frequently when we were using SecuRemote (Checkpoint FW-1). It didn't happen consistently, though

Re: Cable Internet Setup...what is the best way?

1999-08-25 Thread Carric Dooley
Use a Linux box as your masquerading gateway. Carric Dooley COM2:Interactive Media http://www.com2usa.com On Wed, 25 Aug 1999, Daren John wrote: If anyone can help: I have internet access via the local cable operator. I have an NT server, and 3 clients (two desktops and a laptop)

RE: Network browsing through a VPN

1999-08-25 Thread Sweeney, Patrick
The Windows NT resource kit includes a utility called winscl to browse a WINS server from a command line. -Original Message- From: Jen [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 25, 1999 11:48 AM To: Tyron Legette; [EMAIL PROTECTED] Subject: Re: Network browsing through a VPN

RE: Cable Internet Setup...what is the best way?

1999-08-25 Thread Sweeney, Patrick
IMHO the best option is to buy a powerful desktop, install NT or Linux and a real Firewall. The option I would suggest is cheaper and easier but should not be considered secure. UMAX makes a product called UGate+ which is a combination Cable/Modem or DSL Router and DHCP server. Buy this and

RE: quad cards on firewalls

1999-08-25 Thread Joe Matusiewicz
At 11:02 AM 8/25/99 -0400, Gerrish, Robert wrote: What I had been told by Sun support several years ago (and appears to be true AFAIK) is that the interfaces actually have separate MAC addresses burned into them, but Sun (4.x Solaris) only reports the first MAC address. I can't remember how at

RE: Network browsing through a VPN

1999-08-25 Thread Espinola, Micheal
To browse an NT/Windows network remotely, your dialup-client must belong to the same Workgroup/Domain as the NT Logon Domain. If not, you won't get a browse list. If yes, then you will. | -Original Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]]On Behalf Of Tyron

Re: VPN Best low cost solution?

1999-08-25 Thread Matthew G . Harrigan
Contivity is also more secure than VPNet, SecuRemote, and many other solutions we looked at. The reason is that when someone is running the Contivity client, all incoming Internet traffic can be blocked -- all incoming and outgoing traffic go through your firewall. They also allow split

RE: Cable Internet Setup...what is the best way?

1999-08-25 Thread log manager
DNS is 53 Disable tcp/ip sharing Still easier to setup ipchains and use a linux machine to masq as a gateway - On Wed, 25 Aug 1999, Sweeney, Patrick wrote: IMHO the best option is to buy a powerful desktop, install NT or Linux and a real

RE: Network browsing through a VPN

1999-08-25 Thread Ben Nagy
I'd put money on the fact that you haven't configured your WINS servers and are just relying on broadcast traffic, which may well get eaten. You need some way to make sure that all clients know how to get to the master browser for the network. The PDC is always the master browser. Make sure

RE: Network browsing through a VPN

1999-08-25 Thread Sweeney, Patrick
Of course since this a VPN connection there really isn't a DHCP lease. If there is a VPN connectoid (Dial-up Networking entry) you can specify the WINS server in there. (As far as I know that means manually configuring the connectoid on every machine -Original Message- From: Ben Nagy