John,

I'll throw in my $0.02 real quick, just a comment to Terry's post. Should
you decide not to use the router and use a hub or a switch between your
modem and other devices, make sure that you get a switch and not a hub.

I have the exact setup Terry talked about at home; my COX Cable Modem
connects to a 4 port SOHO switch, one port of which goes to my Linksys
Cable/DSL router and two others to separate FreeBSD machines in the corner.
I originally started out with a hub and had major speed and latency problems
on all machines when any node was doing a transfer, once I installed the
switch everything began to and has worked flawlessly.

My main reason for installing such a setup was to allow for some protection
of my desktop and laptop computers, but to also allow my other machines
unfettered access to the Internet.

Let us know if the router works in this case, I just don't think you'll
actually achieve the desired results you are looking for. By using a router
in this situation, you will almost certainly be limited to private addresses
for the computers inside of the DMZ; the router shouldn't, unless configured
otherwise, forward the broadcast packets required for DHCP from your
provider.

Good Luck which ever path you choose.

--
Justin W. Pauler
E-Mail: [EMAIL PROTECTED]
WWW: http://www.jwpauler.org 

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> Behalf Of John Hebert
> Sent: Sunday, November 21, 2004 8:13 PM
> To: [email protected]
> Subject: Re: DMZ not for the hardware port,but a specified IP address was
> Re: [brlug-general] hardware routerDMZ questions
> 
> --- Terry Stockdale <[EMAIL PROTECTED]> wrote:
> > You can put a cheap 10/100 hub or switch between
> > your cable/dsl modem and
> > the router.  Hang the router from the switch and the
> > DMZ machine from the
> > switch.  The DMZ machine will get its IP address
> > from the ISP as you want
> > and the router will get its WAN-side IP address from
> > the ISP.  Your
> > cable/dsl modem must be able to support 2
> > client-side IP addresses -- not
> > all can.
> 
> Terry,
> 
> That would certainly do the trick, and I considered
> that option, but if I could get the same functionality
> out of the router, I'd rather do that than use up a
> hub.
> 
> In any case, thanks for your input. I will follow your
> suggestion if I cannot confirm that the router will do
> what I want.
> 
> John
> 
> 
> 
> __________________________________
> Do you Yahoo!?
> The all-new My Yahoo! - Get yours free!
> http://my.yahoo.com
> 
> 
> 
> _______________________________________________
> General mailing list
> [email protected]
> http://brlug.net/mailman/listinfo/general_brlug.net


Reply via email to