Hello there Gurus of the world,

After having read several good postings about FW-1 et al, I thought I would
share with you all an article I found interesting and that might be of interest
to some of you.  The following URL:

http://people.netscape.com/shadow/work/inspect/index.html

I dont't know if it has already been posted in this list (have not searched the
archives...) but anyways, It has good information about the INSPECT script code
that is used by FW-1 and provides examples of safely allowing PING, Traceroute
and VitalSigns 'NetMedic' traffic through the FW-1, besides nicely explaning the
way Traceroute works and the two approaches to implement it.

Besides sharing this, here is an scenario I am facing for the moment and am
trying to figure out the best cost-effective way of implementing it.

MainOffice using FW-1 V4.x, and Remote users scattered all over the country are
using SecuRemote to get in.  It works OK so far, but it demands that every
remote user (some of them at the same remote office) occupy a phone line, thus
becoming an incovenience specially at those offices where there are even 5 of
these remote users trying to connect at once.  Of course, in these remote
locations another approach has to be taken, of course.  After looking around for
options I see that the Nokia routers seem to be the low-end option for this kind
of setups... but still their pricing ranks higher than what we were expecting at
the moment.  Based on your experience guys and gals, have you had an scenario
like this and have been able to share a remote VPN access with more than one
user at a very cost-effective way?  (I read some articles in the phoneboy site
-www.phoneboy.com- that someone tried to share one of the SecuRemote clients
access... defined as the 'PoorMan's VPN' setup :).  This section describes the
use of proxy servers to accomplish this... although I tried a couple but did not
work).

Any feedback on this will be greatly appreciated.  Cheers,

Francisco Lopez G.

BTW and FYI, the referred site: www.phoneboy.com, has lots of good information
about FW-1...


**********************************************************************
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. 
This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**********************************************************************
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to