There's (at least) 2 modes of address hiding used in firewalls.
1. all internal addresses share the same external address.
2. all internal addresses is "mapped" to a pool of external addresses.
Another method is "stateful inspection":
All connections has to be initiated from behind the firewall (the firewall
accepts only incoming connections that was initiated from the inside).
To prevent spoofing the firewall "knows" what interface the internal
addresses should come from.
(prevents outsiders to use an internal address to fool the firewall)
This method is used by a lot of firewalls, we use Checkpoint Firewall-1.
When this method is used there's no problems(?) with publishing the real
address, outsiders can't reach it if your firewall administrator doesn't
want them to.
Helge
-----Original Message-----
From: Dirk De Bock [mailto:[EMAIL PROTECTED]]
Sent: 13. mai 2000 09:03
To: [EMAIL PROTECTED]
Subject: Re: Anyone know about firewall software?
I should think most firewalls will allow you to 'publish' the real
addresses. This will allow every pc on the inside to be known by it's real
ip number from the outside. At least Axent Raptor 6.0 has this feature.
However to my knowledge there are very few valid reasons to use it.
----- Original Message -----
From: "Richard Ramos" <[EMAIL PROTECTED]>
Sent: Saturday, May 13, 2000 12:32 AM
Subject: OT: Anyone know about firewall software?
> Hi, sorry to be OT, but I've been searching for firewall software that
will
> allow each computer in our LAN to have an individual IP and not do
> connection sharing. Ever hear of any thing like this?
----------------------------------------------------------------------------
--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
