Why not put them on their own network segment and put them behind a
router? A single Cisco 2500-class router would do the trick, and you
could run two of them simultaneously if you wanted to protect against
failure. They're pretty cheap.
-bws
On Tue, 22 Oct 1996, Dan Pritts wrote:
> sorry if this is a faq, but don't remmeber seeing discussion of
> this anywhere.
>
> I'm thinking of a construct similar in functionality to the TCP
> wrapper software, some way that the afs servers can be configured
> to just drop packets coming from untrusted/unallowed networks.
>
> (yeah, yeah, global filesystem and all that, but some of us can't
> or won't or dont' want to publish our cells...and if they're not
> behind a firewall, they might get found out somehow).
>
> dan pritts
> Unix System Admin First Virtual Holdings, Inc.
> [EMAIL PROTECTED] 313-213-3791
>
>
--
Brian W. Spolarich - ANS - [EMAIL PROTECTED] - (313)677-7311
Alice and Bob aren't speaking anymore. She lost his public key.