Why not put them on their own network segment and put them behind a
router?  A single Cisco 2500-class router would do the trick, and you
could run two of them simultaneously if you wanted to protect against
failure.  They're pretty cheap.

  -bws

On Tue, 22 Oct 1996, Dan Pritts wrote:

> sorry if this is a faq, but don't remmeber seeing discussion of
> this anywhere.
> 
> I'm thinking of a construct similar in functionality to the TCP
> wrapper software, some way that the afs servers can be configured
> to just drop packets coming from untrusted/unallowed networks.  
> 
> (yeah, yeah, global filesystem and all that, but some of us can't
> or won't or dont' want to publish our cells...and if they're not
> behind a firewall, they might get found out somehow).
> 
> dan pritts         
> Unix System Admin      First Virtual Holdings, Inc.     
> [EMAIL PROTECTED]           313-213-3791
> 
> 

--
       Brian W. Spolarich - ANS - [EMAIL PROTECTED] - (313)677-7311
    Alice and Bob aren't speaking anymore.  She lost his public key.

Reply via email to